Approved changes feed: RSS · Atom

cpe:2.3:a:condor_project:condor:7.0.4:*:*:*:*:*:*:*

part: a version: 7.0.4 update: *

VendorCondor Project (c4345aee-2cc3-507b-a8b0-62fed4eee73c)
ProductCondor (52c7b7f1-fe3b-5197-8ed7-7f880f4b4eec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/condor purl2cpe 2026-06-01 10:16:33.393160
pkg:deb/ubuntu/condor purl2cpe 2026-06-01 10:16:33.393161
pkg:github/htcondor/htcondor purl2cpe 2026-06-01 10:16:33.393163
pkg:rpm/fedora/condor purl2cpe 2026-06-01 10:16:33.393164
pkg:rpm/opensuse/htcondor purl2cpe 2026-06-01 10:16:33.393166

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3416 vulnerable 2026-06-08 05:02:09.672332 Details available
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
Published: 2012-08-25T10:00:00.000Z
Updated: 2024-08-06T20:05:12.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4133 vulnerable 2026-06-08 04:51:47.202817 Details available
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
Published: 2009-12-23T18:00:00.000Z
Updated: 2024-08-07T06:54:09.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.