Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pbs_professional | Altair | 13.0.0 (including) | 13.0.412 (excluding) |
| Pbs_professional | Altair | 14.0.0 (including) | 14.2.7 (excluding) |
| Pbs_professional | Altair | 18.0.0 (including) | 18.2.5 (excluding) |
| Pbs_professional | Altair | 19.1.0 (including) | 19.1.3 (excluding) |
| Pbs_professional | Altair | 19.2.0 (including) | 19.2.4 (excluding) |