Cyber Resilience

CVE-2023-49938

Schedmd Slurm 22.05.0 – 22.05.11

Published
14 December 2023
Modified
04 November 2025
Patch / advisory
View advisory
CVSS Score v3.1 8.2
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS Score 0.0076 52th percentile
Risk Priority 63 floored blend · peak EPSS

Summary

CVE-2023-49938 is a high-severity an unspecified weakness vulnerability in Schedmd Slurm. Its CVSS base score is 8.2 (High).

Operationally, ranked in the top 48% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups.…

more

The fixed versions are 22.05.11 and 23.02.7.

CWE(s)
NVD-CWE-Other

Related Threats

CVEs Like This One

CVE-2024-48936Same product: Schedmd Slurm
CVE-2023-49937Same product: Schedmd Slurm
CVE-2023-49933Same product: Schedmd Slurm
CVE-2023-49936Same product: Schedmd Slurm
CVE-2023-49934Same product: Schedmd Slurm
CVE-2023-49935Same product: Schedmd Slurm
CVE-2023-41914Same product: Schedmd Slurm

Affected Assets

schedmd
slurm
22.05.0 — 22.05.11 · 23.02.0 — 23.02.7

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References