CVE-2021-43337: Medium severity slurm workload manager vulnerability
SchedMD Slurm 21.08. before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=jobscript and/or jobenv options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-43337?
CVE-2021-43337 is a vulnerability in SchedMD Slurm 21.08.* before 21.08.4 that allows incorrect access control, potentially allowing unauthorized access to job scripts and environment files.
What is the severity of CVE-2021-43337?
The severity of CVE-2021-43337 is medium with a CVSS score of 6.5.
How does CVE-2021-43337 impact SchedMD Slurm?
CVE-2021-43337 impacts SchedMD Slurm versions before 21.08.4 by allowing users to request job scripts and environment files they should not have access to.
How can I fix CVE-2021-43337?
To fix CVE-2021-43337, update SchedMD Slurm to version 21.08.4 or later.
Are there any references for CVE-2021-43337?
Yes, you can find more information about CVE-2021-43337 at the following references: [1](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5VY34WSSPRPA6MISNYBZWHSGX2SYSEEE/), [2](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DUWNGDQTS7AWFI7FIHUWQOYJSD2IQTCG/), [3](https://lists.schedmd.com/pipermail/slurm-announce/)