Description
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors.
References
- [oss-security] 20120105 CVE request: TORQUE Munge Authentication Security Bypass mailing-list
- 47381 third-party-advisory
- [oss-security] 20120105 Re: CVE request: TORQUE Munge Authentication Security Bypass mailing-list
- http://www.adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259
- 51224 vdb-entry