Htcondor

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWisc (9ff46643-80c6-5505-8716-44613eb3c4b9)
ProductHtcondor (a5ed9626-557b-5252-9fd9-a224e537d0dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/condor purl2cpe 2026-06-01 10:14:39.932784
pkg:deb/ubuntu/condor purl2cpe 2026-06-01 10:14:39.932785
pkg:github/htcondor/htcondor purl2cpe 2026-06-01 10:14:39.932787

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-66433 vulnerable 2026-06-08 07:41:18.923859 Details available
MEDIUM (4.2)
HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3.
Published: 2025-11-30T00:00:00.000Z
Updated: 2025-12-01T14:10:19.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26110 vulnerable 2026-06-08 05:41:50.549192 Details available
An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon.
Published: 2022-04-06T01:07:11.000Z
Updated: 2024-08-03T04:56:37.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45104 vulnerable 2026-06-08 05:36:47.828854 Details available
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
Published: 2022-04-06T01:04:19.000Z
Updated: 2024-08-04T04:39:20.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45103 vulnerable 2026-06-08 05:36:47.828549 Details available
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.
Published: 2022-04-06T00:55:20.000Z
Updated: 2024-08-04T04:32:13.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45101 vulnerable 2026-06-08 05:36:47.824790 Details available
An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/or read their data.
Published: 2021-12-16T04:46:42.000Z
Updated: 2024-08-04T04:32:13.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25312 vulnerable 2026-06-08 05:30:40.626098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25311 vulnerable 2026-06-08 05:30:40.625603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18823 vulnerable 2026-06-08 05:13:12.371967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16816 vulnerable 2026-06-08 05:09:01.094571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8126 vulnerable 2026-06-08 05:06:07.773204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3490 vulnerable 2026-06-08 05:02:10.184393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.