{"id":"UBUNTU-CVE-2021-43337","details":"SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_script and/or job_env options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access.","modified":"2025-07-16T08:27:03.384994Z","published":"2021-11-17T06:15:00Z","withdrawn":"2025-07-18T16:47:02Z","upstream":["CVE-2021-43337"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-43337"},{"type":"REPORT","url":"https://lists.schedmd.com/pipermail/slurm-announce/2021/000068.html"},{"type":"REPORT","url":"https://www.schedmd.com/news.php?id=256"},{"type":"REPORT","url":"https://lists.schedmd.com/pipermail/slurm-announce/"},{"type":"REPORT","url":"https://www.schedmd.com/news.php"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2021-43337"}],"affected":[{"package":{"name":"slurm-wlm","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/slurm-wlm@21.08.5-2ubuntu1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.08.5-2ubuntu1"}]}],"versions":["20.11.7+really20.11.4-2","21.08.5-1","21.08.5-1.1","21.08.5-2"],"ecosystem_specific":{"binaries":[{"binary_name":"libpam-slurm","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libpam-slurm-adopt","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libpmi0","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libpmi0-dbgsym","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libpmi0-dev","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libpmi2-0","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libpmi2-0-dbgsym","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libpmi2-0-dev","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libslurm-dev","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libslurm-perl","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libslurm37","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libslurm37-dbgsym","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"libslurmdb-perl","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"slurm-client","binary_version":"21.08.5-2ubuntu1"},{"binary_version":"21.08.5-2ubuntu1","binary_name":"slurm-client-dbgsym"},{"binary_name":"slurm-client-emulator","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"slurm-wlm","binary_version":"21.08.5-2ubuntu1"},{"binary_version":"21.08.5-2ubuntu1","binary_name":"slurm-wlm-basic-plugins"},{"binary_name":"slurm-wlm-basic-plugins-dbgsym","binary_version":"21.08.5-2ubuntu1"},{"binary_version":"21.08.5-2ubuntu1","binary_name":"slurm-wlm-basic-plugins-dev"},{"binary_version":"21.08.5-2ubuntu1","binary_name":"slurm-wlm-doc"},{"binary_version":"21.08.5-2ubuntu1","binary_name":"slurm-wlm-emulator"},{"binary_name":"slurm-wlm-torque","binary_version":"21.08.5-2ubuntu1"},{"binary_version":"21.08.5-2ubuntu1","binary_name":"slurmctld"},{"binary_name":"slurmctld-dbgsym","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"slurmd","binary_version":"21.08.5-2ubuntu1"},{"binary_version":"21.08.5-2ubuntu1","binary_name":"slurmd-dbgsym"},{"binary_name":"slurmdbd","binary_version":"21.08.5-2ubuntu1"},{"binary_version":"21.08.5-2ubuntu1","binary_name":"slurmdbd-dbgsym"},{"binary_name":"slurmrestd","binary_version":"21.08.5-2ubuntu1"},{"binary_name":"sview","binary_version":"21.08.5-2ubuntu1"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43337.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]}