Unscored severity · published Dec 7, 2010
CVE-2010-4179
The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin)…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Mrg · Redhat
1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4179
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4179
Vendor Advisory
http://secunia.com/advisories/42406
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0921.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0922.html
www.securitytracker.com
http://www.securitytracker.com/id?1024806
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3091
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=654856
More from Enterprise Mrg
9.8
CVE-2012-3460
cumin: At installation postgresql database user created without password
8.0
CVE-2018-16884
A flaw was found in the Linux kernel's NFS41+ subsystem
7.8
CVE-2020-27786
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a…
7.8
CVE-2020-10757
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages
7.8
CVE-2017-7482
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field