An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/or read their data.
{
"binaries": [
{
"binary_name": "condor",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "condor-annex-ec2",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "condor-kbdd",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "condor-test",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "condor-upgrade-checks",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "condor-vm-gahp",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "htcondor",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "htcondor-annex-ec2",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "htcondor-test",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "htcondor-upgrade-checks",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "minicondor",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
},
{
"binary_name": "minihtcondor",
"binary_version": "23.4.0+dfsg-1ubuntu4.1"
}
]
}{
"binaries": [
{
"binary_name": "condor",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "condor-annex-ec2",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "condor-kbdd",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "condor-test",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "condor-upgrade-checks",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "condor-vm-gahp",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "htcondor",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "htcondor-annex-ec2",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "htcondor-test",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "htcondor-upgrade-checks",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "minicondor",
"binary_version": "23.9.6+dfsg-2.1build2"
},
{
"binary_name": "minihtcondor",
"binary_version": "23.9.6+dfsg-2.1build2"
}
]
}{
"binaries": [
{
"binary_name": "condor",
"binary_version": "25.6.1+dfsg-1"
},
{
"binary_name": "condor-annex-ec2",
"binary_version": "25.6.1+dfsg-1"
},
{
"binary_name": "condor-kbdd",
"binary_version": "25.6.1+dfsg-1"
},
{
"binary_name": "condor-test",
"binary_version": "25.6.1+dfsg-1"
},
{
"binary_name": "condor-vm-gahp",
"binary_version": "25.6.1+dfsg-1"
},
{
"binary_name": "minicondor",
"binary_version": "25.6.1+dfsg-1"
}
]
}