CVE-2023-49935

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.

• CWE-613

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/
• https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.htmlMailing List, Vendor Advisory
• https://www.schedmd.com/security-archive.phpVendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/
• https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.htmlMailing List, Vendor Advisory
• https://www.schedmd.com/security-archive.phpVendor Advisory

Published

Dec 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-4993Incorrect Use of Privileged APIs vulnerability in Utarit Inf…7.5
• CVE-2023-49930An issue was discovered in Couchbase Server before 7.2.4. cU…9.8
• CVE-2023-49931An issue was discovered in Couchbase Server before 7.2.4. SQ…9.8
• CVE-2023-49932An issue was discovered in Couchbase Server before 7.2.4. An…5.4
• CVE-2023-49933An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, a…7.5
• CVE-2023-49934An issue was discovered in SchedMD Slurm 23.11.x. There is S…9.8
• CVE-2023-49936An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, a…7.5
• CVE-2023-49937An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, a…9.8
• CVE-2023-49938An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x…8.2
• CVE-2023-4994The Allow PHP in Posts and Pages plugin for WordPress is vul…6.4
• CVE-2023-49943Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows s…5.4
• CVE-2023-49944The Challenge Response feature of BeyondTrust Privilege Mana…6.7