HIGH🇵🇱 Wersja polska

CVE-2023-49933

CVSS 7.5v3.1pub. 2023-12-14upd. 2025-11-04

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Schedmd Slurm

    APP
    Schedmd
    23.1122.05 – 22.05.12 (excl.)23.02 – 23.02.7 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-49937CRITICAL9.8PL ✓same product

Double free w SchedMD Slurm umożliwia RCE lub DoS

CVE-2023-49934CRITICAL9.8PL ✓same product

SQL Injection w SchedMD Slurm 23.11.x przeciwko bazie SlurmDBD

CVE-2022-29502CRITICAL9.8PL ✓same product

Nieprawidłowa kontrola dostępu i eskalacja uprawnień w SchedMD Slurm

CVE-2020-27745CRITICAL9.8PL ✓same product

Buffer Overflow w pluginie PMIx MPI w Slurm — RCE bez uwierzytelnienia

CVE-2019-12838CRITICAL9.8PL ✓same product

SQL Injection w SchedMD Slurm — nieuwierzytelniony dostęp do bazy danych