VULNERABILITY INTELLIGENCE

CVE-2017-15566

CVSS score7.8 HIGH

EPSS probability0.58%

CISA KEVNot currently listed

Published2017-11-01

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.

Weakness classification

CWE-426: Untrusted Search Path

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Third Party Advisory
cve@mitre.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory