An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users jobs and/or read their data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Htcondor | Wisc | * | 8.8.13 (including) |
| Htcondor | Wisc | 9.0.0 (including) | 9.0.2 (including) |
| Htcondor | Wisc | 9.1.0 (including) | 9.1.0 (including) |
| Condor | Ubuntu | bionic | * |
| Condor | Ubuntu | focal | * |
| Condor | Ubuntu | oracular | * |
| Condor | Ubuntu | plucky | * |
| Condor | Ubuntu | trusty | * |
| Condor | Ubuntu | trusty/esm | * |
| Condor | Ubuntu | xenial | * |