Vulnerability Details : CVE-2019-19727
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.
Products affected by CVE-2019-19727
- cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
- cpe:2.3:a:schedmd:slurm:*:*:*:*:*:*:*:*
- cpe:2.3:a:schedmd:slurm:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-19727
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 35 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-19727
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
2.1
|
LOW | AV:L/AC:L/Au:N/C:P/I:N/A:N |
3.9
|
2.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2019-19727
-
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-19727
-
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00038.html
[security-announce] openSUSE-SU-2020:0085-1: important: Security updateThird Party Advisory
-
https://lists.schedmd.com/pipermail/slurm-announce/
The slurm-announce ArchivesMailing List;Vendor Advisory
-
https://bugzilla.suse.com/show_bug.cgi?id=1155784
Bug 1155784 – VUL-0: CVE-2019-19727: slurm: slurmdbd: slurmdbd.conf has an insecure Permission by defaultIssue Tracking;Third Party Advisory
-
https://www.schedmd.com/news.php
News | SchedMDVendor Advisory
Jump to