CVE-2021-45103

HIGH

HTCondor 8.9.4-9.0.9 and 9.1.0-9.5.0 - Unauthorized S3 File Access via Log File Information Disclosure

Title source: llm
STIX 2.1

Description

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.

References (2)

Core 2

Scores

CVSS v3 8.1
EPSS 0.0086
EPSS Percentile 53.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Details

CWE
CWE-532
Status published
Products (1)
wisc/htcondor 8.9.4 - 9.0.10
Published Apr 06, 2022
Tracked Since Feb 18, 2026