CVE-2021-45104

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.

CVSS v3 7.4 HIGH
CVSS v2.0 5.8 MEDIUM

7.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006/	Broken Link
https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0002	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:wisc:htcondor::::::::
	cpe:2.3:a:wisc:htcondor::::::::

History

No history.

Information

Published : 2022-04-06 02:15

Updated : 2024-02-28 19:09

NVD link : CVE-2021-45104

Mitre link : CVE-2021-45104

CVE.ORG link : CVE-2021-45104

JSON object : View

Products Affected

wisc

htcondor

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2021-45104", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.2}]}, "published": "2022-04-06T02:15:08.440", "references": [{"url": "https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006/", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0002", "tags": ["Mitigation", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data."}, {"lang": "es", "value": "Se ha detectado un problema en HTCondor versiones 9.0.x anteriores a 9.0.10 y versiones 9.1.x anteriores a 9.5.1. Un atacante que pueda capturar los datos de red de HTCondor puede interferir con los trabajos y datos de los usuarios"}], "lastModified": "2022-07-12T17:42:04.277", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "260B8317-02D5-4B65-9E58-AAA12DE06C4B", "versionEndExcluding": "9.0.10", "versionStartIncluding": "8.9.3"}, {"criteria": "cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCA442A3-6088-4874-AA37-CFB0D8D600E5", "versionEndExcluding": "9.6.0", "versionStartIncluding": "9.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}