SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.

The remote Ubuntu 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6458-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.
    (CVE-2022-29502)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3535-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3497-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3490-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3491-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3477-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3462-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3468-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3454-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5166 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1831-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1815-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1726-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1666-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184019	Ubuntu 20.04 ESM / 22.04 ESM : Slurm vulnerabilities (USN-6458-1)	Nessus	Ubuntu Local Security Checks	critical
165752	SUSE SLES15 Security Update : slurm (SUSE-SU-2022:3535-1)	Nessus	SuSE Local Security Checks	high
165671	SUSE SLES12 Security Update : slurm (SUSE-SU-2022:3497-1)	Nessus	SuSE Local Security Checks	high
165664	SUSE SLES15 Security Update : slurm (SUSE-SU-2022:3490-1)	Nessus	SuSE Local Security Checks	high
165648	SUSE SLES15 Security Update : slurm_20_02 (SUSE-SU-2022:3491-1)	Nessus	SuSE Local Security Checks	high
165614	SUSE SLES12 Security Update : slurm_20_02 (SUSE-SU-2022:3477-1)	Nessus	SuSE Local Security Checks	high
165580	SUSE SLES15 Security Update : slurm_18_08 (SUSE-SU-2022:3462-1)	Nessus	SuSE Local Security Checks	high
165578	SUSE SLES15 Security Update : slurm (SUSE-SU-2022:3468-1)	Nessus	SuSE Local Security Checks	high
165573	SUSE SLES12 Security Update : slurm_18_08 (SUSE-SU-2022:3454-1)	Nessus	SuSE Local Security Checks	high
162415	Debian DSA-5166-1 : slurm-wlm - security update	Nessus	Debian Local Security Checks	high
161496	SUSE SLES15 Security Update : slurm_20_11 (SUSE-SU-2022:1831-1)	Nessus	SuSE Local Security Checks	high
161465	SUSE SLES15 Security Update : slurm_20_11 (SUSE-SU-2022:1815-1)	Nessus	SuSE Local Security Checks	high
161360	SUSE SLES12 Security Update : slurm_20_11 (SUSE-SU-2022:1726-1)	Nessus	SuSE Local Security Checks	high
161222	SUSE SLES15 Security Update : slurm (SUSE-SU-2022:1666-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-29500

high

Tenable Plugins

critical

high

high

high

high

high

high

high

high

high

high

high

high

high