CVE-2017-15566

high

Description

Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.

References

https://www.schedmd.com/news.php?id=193#OPT_193

https://www.debian.org/security/2017/dsa-4023

http://www.securityfocus.com/bid/101675

Details

Source: Mitre, NVD

Published: 2017-11-01

Updated: 2019-10-03

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H