CVE-2011-4925 Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts...
MediumCVSS 4.9
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cluster resources torque resource manager | = 1.0.1p0 | No fix listed |
| cluster resources torque resource manager | = 1.0.1p1 | No fix listed |
| cluster resources torque resource manager | = 1.0.1p2 | No fix listed |
| cluster resources torque resource manager | = 1.0.1p3 | No fix listed |
| cluster resources torque resource manager | = 1.0.1p4 | No fix listed |
| cluster resources torque resource manager | = 1.0.1p5 | No fix listed |
| cluster resources torque resource manager | = 1.0.1p6 | No fix listed |
| cluster resources torque resource manager | = 1.1.0p0 | No fix listed |
| cluster resources torque resource manager | = 1.1.0p1 | No fix listed |
| cluster resources torque resource manager | = 1.1.0p2 | No fix listed |
| cluster resources torque resource manager | = 1.1.0p3 | No fix listed |
| cluster resources torque resource manager | = 1.1.0p4 | No fix listed |
| cluster resources torque resource manager | = 1.1.0p5 | No fix listed |
| cluster resources torque resource manager | = 1.1.0p6 | No fix listed |
| cluster resources torque resource manager | = 1.2.0p0 | No fix listed |
| cluster resources torque resource manager | = 1.2.0p1 | No fix listed |
| cluster resources torque resource manager | = 1.2.0p2 | No fix listed |
| cluster resources torque resource manager | = 1.2.0p3 | No fix listed |
| cluster resources torque resource manager | = 1.2.0p4 | No fix listed |
| cluster resources torque resource manager | = 1.2.0p5 | No fix listed |
| cluster resources torque resource manager | = 1.2.0p6 | No fix listed |
| cluster resources torque resource manager | = 2.0.0p0 | No fix listed |
| cluster resources torque resource manager | = 2.0.0p1 | No fix listed |
| cluster resources torque resource manager | = 2.0.0p2 | No fix listed |
| cluster resources torque resource manager | = 2.0.0p3 | No fix listed |
Show 42 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cluster resources torque resource manager | = 2.0.0p4 | No fix listed |
| cluster resources torque resource manager | = 2.0.0p5 | No fix listed |
| cluster resources torque resource manager | = 2.0.0p6 | No fix listed |
| clusterresources torque resource manager | <= 2.5.8 | No fix listed |
| clusterresources torque resource manager | = 2.1.0p0 | No fix listed |
| clusterresources torque resource manager | = 2.1.1 | No fix listed |
| clusterresources torque resource manager | = 2.1.2 | No fix listed |
| clusterresources torque resource manager | = 2.2.0 | No fix listed |
| clusterresources torque resource manager | = 2.3.0 | No fix listed |
| clusterresources torque resource manager | = 2.3.1 | No fix listed |
| clusterresources torque resource manager | = 2.3.2 | No fix listed |
| clusterresources torque resource manager | = 2.3.3 | No fix listed |
| clusterresources torque resource manager | = 2.3.4 | No fix listed |
| clusterresources torque resource manager | = 2.3.5 | No fix listed |
| clusterresources torque resource manager | = 2.3.6 | No fix listed |
| clusterresources torque resource manager | = 2.3.7 | No fix listed |
| clusterresources torque resource manager | = 2.3.8 | No fix listed |
| clusterresources torque resource manager | = 2.3.9 | No fix listed |
| clusterresources torque resource manager | = 2.3.10 | No fix listed |
| clusterresources torque resource manager | = 2.3.11 | No fix listed |
| clusterresources torque resource manager | = 2.3.12 | No fix listed |
| clusterresources torque resource manager | = 2.4.0 | No fix listed |
| clusterresources torque resource manager | = 2.4.1 | No fix listed |
| clusterresources torque resource manager | = 2.4.2 | No fix listed |
| clusterresources torque resource manager | = 2.4.3 | No fix listed |
| clusterresources torque resource manager | = 2.4.4 | No fix listed |
| clusterresources torque resource manager | = 2.4.5 | No fix listed |
| clusterresources torque resource manager | = 2.4.6 | No fix listed |
| clusterresources torque resource manager | = 2.4.7 | No fix listed |
| clusterresources torque resource manager | = 2.4.8 | No fix listed |
| clusterresources torque resource manager | = 2.4.9 | No fix listed |
| clusterresources torque resource manager | = 2.4.10 | No fix listed |
| clusterresources torque resource manager | = 2.4.11 | No fix listed |
| clusterresources torque resource manager | = 2.4.12 | No fix listed |
| clusterresources torque resource manager | = 2.5.0 | No fix listed |
| clusterresources torque resource manager | = 2.5.1 | No fix listed |
| clusterresources torque resource manager | = 2.5.2 | No fix listed |
| clusterresources torque resource manager | = 2.5.3 | No fix listed |
| clusterresources torque resource manager | = 2.5.4 | No fix listed |
| clusterresources torque resource manager | = 2.5.5 | No fix listed |
| clusterresources torque resource manager | = 2.5.6 | No fix listed |
| clusterresources torque resource manager | = 2.5.7 | No fix listed |
References
- [oss-security] 20120105 CVE request: TORQUE Munge Authentication Security Bypass mailing-list
- [oss-security] 20120105 Re: CVE request: TORQUE Munge Authentication Security Bypass mailing-list patch
- 47381 third-party-advisory vendor-advisory
- www.adaptivecomputing.com
- 51224 vdb-entry