A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3535-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3497-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3490-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3491-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3477-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3462-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3468-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3454-1 advisory.

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
    (CVE-2022-29500)

  - SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges     and code execution. (CVE-2022-29501)

  - A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory     allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE     Factory slurm versions prior to 22.05.2-3.3. (CVE-2022-31251)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
165752	SUSE SLES15 Security Update : slurm (SUSE-SU-2022:3535-1)	Nessus	SuSE Local Security Checks	high
165671	SUSE SLES12 Security Update : slurm (SUSE-SU-2022:3497-1)	Nessus	SuSE Local Security Checks	high
165664	SUSE SLES15 Security Update : slurm (SUSE-SU-2022:3490-1)	Nessus	SuSE Local Security Checks	high
165648	SUSE SLES15 Security Update : slurm_20_02 (SUSE-SU-2022:3491-1)	Nessus	SuSE Local Security Checks	high
165614	SUSE SLES12 Security Update : slurm_20_02 (SUSE-SU-2022:3477-1)	Nessus	SuSE Local Security Checks	high
165580	SUSE SLES15 Security Update : slurm_18_08 (SUSE-SU-2022:3462-1)	Nessus	SuSE Local Security Checks	high
165578	SUSE SLES15 Security Update : slurm (SUSE-SU-2022:3468-1)	Nessus	SuSE Local Security Checks	high
165573	SUSE SLES12 Security Update : slurm_18_08 (SUSE-SU-2022:3454-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-31251

medium

Tenable Plugins

high

high

high

high

high

high

high

high