CVE-2022-29500
moderate-risk
Published 2022-05-05
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.
Do I need to act?
~
1.8% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10
High
NETWORK
/ LOW complexity
Affected Products (5)
Affected Vendors
References (14)
Mailing List
https://lists.schedmd.com/pipermail/slurm-announce/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5166
Mitigation
https://www.schedmd.com/news.php
Mitigation
https://www.schedmd.com/news.php?id=260
Mailing List
https://lists.schedmd.com/pipermail/slurm-announce/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5166
Mitigation
https://www.schedmd.com/news.php
Mitigation
https://www.schedmd.com/news.php?id=260
47
/ 100
moderate-risk
Severity
30/34 · Critical
Exploitability
5/34 · Minimal
Exposure
12/34 · Low