An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "8.9.4"
},
{
"fixed": "9.0.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.1.0"
},
{
"fixed": "9.6.0"
}
],
"source": "CPE_RANGE"
}
]
}