HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.
{ "versions": [ { "introduced": "8.9.2" }, { "fixed": "8.9.11" } ] }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25312.json"