CVE catalog

CVE-2019-18823

condor - security update

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.81% · Oct 25, 2026

HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user to the condor_schedd. (For example to submit or remove jobs)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancondor1323.2.0+dfsg-1fixed
Debiancondor1423.2.0+dfsg-1fixed
Debiancondor108.6.8~dfsg.1-2vulnerable
Debiancondor108.6.8~dfsg.1-2+deb10u1fixed
Debiancondor98.4.11~dfsg.1-1vulnerable
Debiancondor98.4.11~dfsg.1-1+deb9u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancondordeb1323.2.0+dfsg-1Not reportedDEBIAN-CVE-2019-18823Not reported
Debiancondordeb1423.2.0+dfsg-1Not reportedDEBIAN-CVE-2019-18823Not reported
Debiancondordeb108.6.8~dfsg.1-2+deb10u1Not reportedDSA-5144-1Not reported
Debiancondordeb98.4.11~dfsg.1-1+deb9u1Not reportedDLA-2724-1Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [condor]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [condor-annex-ec2]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [condor-dev]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [condor-doc]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1 · all · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1 · all · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [condor-kbdd]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [condor-test]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [condor-upgrade-checks]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1 · all · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1 · all · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [condor-vm-gahp]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [htcondor]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [htcondor-annex-ec2]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [htcondor-dev]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [htcondor-doc]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1 · all · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1 · all · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [htcondor-test]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [htcondor-upgrade-checks]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1 · all · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1 · all · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [minicondor]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

  • [minihtcondor]Fixed

    Source package: [condor]

    Details (2)

    • 23.9.6+dfsg-2.1+b9 · amd64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

    • 23.9.6+dfsg-2.1+b9 · arm64 · trixie

      Fixed · Fixed: 23.2.0+dfsg-1

      pypi · condor · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]