Approved changes feed: RSS · Atom

cpe:2.3:a:condor_project:condor:6.5.4:*:*:*:*:*:*:*

part: a version: 6.5.4 update: *

VendorCondor Project (c4345aee-2cc3-507b-a8b0-62fed4eee73c)
ProductCondor (52c7b7f1-fe3b-5197-8ed7-7f880f4b4eec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/condor purl2cpe 2026-06-01 10:16:33.363722
pkg:deb/ubuntu/condor purl2cpe 2026-06-01 10:16:33.363724
pkg:github/htcondor/htcondor purl2cpe 2026-06-01 10:16:33.363725
pkg:rpm/fedora/condor purl2cpe 2026-06-01 10:16:33.363727
pkg:rpm/opensuse/htcondor purl2cpe 2026-06-01 10:16:33.363728

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3416 vulnerable 2026-06-08 05:02:09.662093 Details available
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
Published: 2012-08-25T10:00:00.000Z
Updated: 2024-08-06T20:05:12.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4133 vulnerable 2026-06-08 04:51:47.186130 Details available
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
Published: 2009-12-23T18:00:00.000Z
Updated: 2024-08-07T06:54:09.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.