HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user to the condor_schedd. (For example to submit or remove jobs)
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-04-27T14:07:26
Updated: 2022-05-23T10:06:10
Reserved: 2019-11-07T00:00:00
Link: CVE-2019-18823
JSON object: View
NVD Information
Status : Modified
Published: 2020-04-27T15:15:12.220
Modified: 2023-11-07T03:07:17.300
Link: CVE-2019-18823
JSON object: View
Redhat Information
No data.
CWE