Approved changes feed: RSS · Atom

cpe:2.3:a:condor_project:condor:7.2.1:*:*:*:*:*:*:*

part: a version: 7.2.1 update: *

VendorCondor Project (c4345aee-2cc3-507b-a8b0-62fed4eee73c)
ProductCondor (52c7b7f1-fe3b-5197-8ed7-7f880f4b4eec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/condor purl2cpe 2026-06-01 10:16:33.409809
pkg:deb/ubuntu/condor purl2cpe 2026-06-01 10:16:33.409811
pkg:github/htcondor/htcondor purl2cpe 2026-06-01 10:16:33.409812
pkg:rpm/fedora/condor purl2cpe 2026-06-01 10:16:33.409814
pkg:rpm/opensuse/htcondor purl2cpe 2026-06-01 10:16:33.409815

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3416 vulnerable 2026-06-08 05:02:09.680026 Details available
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
Published: 2012-08-25T10:00:00.000Z
Updated: 2024-08-06T20:05:12.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4930 vulnerable 2026-06-08 04:59:33.906186 Details available
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
Published: 2014-02-10T17:00:00.000Z
Updated: 2024-08-07T00:23:38.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4133 vulnerable 2026-06-08 04:51:47.208200 Details available
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
Published: 2009-12-23T18:00:00.000Z
Updated: 2024-08-07T06:54:09.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.