CVE-2010-4179: High severity redhat Enterprise MRG vulnerability
In MRG 1.3, the provided Management Console Installation Guide instructed administrators to explicitly configure "QUEUEALLTRUSTEDUSERS=True" so that the management console (cumin) could facilitate submissions on behalf of a user. This configuration facilitated a trust relationship between cumin and the condor-qmf plugins. However, there was inadequate access control for securing the trusted channel; anyone able to publish to a broker could submit jobs. As well, this meant that a user could submit a job to run as any other user other than root (Condor does not run jobs as root).
In a future update, through enhancements to the QMF Agent, access control on the condor-qmf plugins is adequate to secure the trust relationship.
Other sources
The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4179?
CVE-2010-4179 is classified as a medium severity vulnerability.
How do I fix CVE-2010-4179?
To fix CVE-2010-4179, avoid configuring 'QUEUE_ALL_TRUSTED_USERS=True' in the Management Console.
What software versions are affected by CVE-2010-4179?
CVE-2010-4179 affects Red Hat Enterprise MRG version 1.3.
What type of vulnerability is CVE-2010-4179?
CVE-2010-4179 is a configuration-related vulnerability that compromises user trust relationships.
What are the consequences of CVE-2010-4179?
Exploiting CVE-2010-4179 may allow unauthorized users to perform actions on behalf of trusted users.