CWE Code: 255
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Credentials Management
Summary: simple linux utility for resource management (slurm) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local slurm users to modify files and gain privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-06-16
Last Modified Date: 2017-08-17