CVE-2012-5390

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-06 · updated 2026-06-16
Weakness: CWE-264

Description

The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job.

Affected products

Condor Project Condor: 7.9.0, 7.8.0, 7.8.1, 7.8.2, 7.8.3, 7.8.4 (+4)

References

http://research.cs.wisc.edu/htcondor/security/vulnerabilities/CONDOR-2012-0003.html
http://secunia.com/advisories/51862
http://www.securityfocus.com/bid/57328
http://research.cs.wisc.edu/htcondor/security/vulnerabilities/CONDOR-2012-0003.html
http://secunia.com/advisories/51862
http://www.securityfocus.com/bid/57328

Get alerted when CVE-2012-5390 or the next vulnerability affects your stack