CVE-2011-2907 (GCVE-0-2011-2907)

Vulnerability from cvelistv5 – Published: 2011-08-15 19:00 – Updated: 2024-08-06 23:15
VLAI
Summary
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
Date Public
2011-08-09 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T23:15:31.645Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=713090"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296"
          },
          {
            "name": "[torqueusers] 20110809 TORQUE authorization security vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html"
          },
          {
            "name": "49119",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/49119"
          },
          {
            "name": "45524",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45524"
          },
          {
            "name": "torque-resource-manager-pbsohost-sec-bypass(69138)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69138"
          },
          {
            "name": "[oss-security] 20110810 CVE-2011-2907: authentication bypass in torque",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/08/11/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-08-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=713090"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296"
        },
        {
          "name": "[torqueusers] 20110809 TORQUE authorization security vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html"
        },
        {
          "name": "49119",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/49119"
        },
        {
          "name": "45524",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45524"
        },
        {
          "name": "torque-resource-manager-pbsohost-sec-bypass(69138)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69138"
        },
        {
          "name": "[oss-security] 20110810 CVE-2011-2907: authentication bypass in torque",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/08/11/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-2907",
    "datePublished": "2011-08-15T19:00:00.000Z",
    "dateReserved": "2011-07-27T00:00:00.000Z",
    "dateUpdated": "2024-08-06T23:15:31.645Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2011-2907",
      "date": "2026-07-17",
      "epss": "0.02879",
      "percentile": "0.85273"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"3.0.1\", \"matchCriteriaId\": \"29C0CBAA-E830-41C2-B906-477B4770305C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3A0E0AA0-5605-4AFD-9F97-BD8AF651BABC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0p11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C4D4148C-AC29-4DAD-B4E4-8F7E31BD07B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EA761446-8547-4947-9D4E-E086B87075A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"899B8050-CFAE-433D-812A-5CDEBFDA4567\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C54F40A-E0C8-4C3A-AFAD-95A4DA7EA928\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B26921CD-7FE0-4241-B887-26D430708C11\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0FD9F5FA-40D5-4C69-8C53-CE562B44022F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6414C31C-687A-4707-B8EB-2F31534EFF3B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9269D021-686E-4983-8883-2E5C4BA5A557\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7ACE64A0-D65F-4C14-A231-ED00DB87E2FB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0A5CD0E9-26BD-44A2-B803-FB9B95E01F78\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8FC592A6-BBA5-4F28-B3A8-A0B125B6E8A7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"305479E9-39E7-4121-8937-C9E44893B9C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C95ADDC1-1F6F-4CAA-94E7-C7B5A503D144\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A7F56B2-0121-4C1B-B08A-7AE0B84755DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"523EB787-7589-4CDE-9213-79139D445C9D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C9712C71-A018-4526-8434-51E1F5602687\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1483A5DA-228C-4CEE-9D1B-728268BCA1E2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"28F19311-C9B9-4103-893D-6950E992847E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1FE4DFBE-868E-4A7B-B933-4E3EB4D5F3C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CDD8A7A5-8910-4797-A54E-BC427810FB78\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B0C3BF00-79D6-47CB-9E33-D6BBA4EAFE05\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E3425F0A-7128-4832-ACB6-8F68CE5EBB6B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2AD53862-C791-4566-999D-3F82982ED609\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"903E8441-F7C4-4BA7-BF5A-34094A040EFC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C9F9DF5-EA89-4279-B23A-2AA525A48DEB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"10175C93-93A0-4C93-883B-F88B4A0DD12E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ACC98979-3F42-41A8-B9E1-7B0DB5398FB0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D4C90506-2DC2-41AE-B308-F94C1A8847EA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"54AB15BC-1566-4F82-966D-D5D6929F6F6D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"477D5192-5E68-46AB-AB9E-0CE39CBF578D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E6ED0C2B-ADE7-4DB6-82CA-B17D7A277A93\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EAE061D1-0E17-4B6C-A500-F3DA9DDD605E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"85EE8536-0C3D-48EC-9D5A-D2504D91814C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E84D3308-08B8-4F41-A089-63C327E61D70\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0EA067A0-C187-46B4-A1D8-FCCC5118893D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6464ADEA-13EA-4143-83B3-534CDDA22A1C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B8588AF-57AB-4F31-83D4-50225B6A95F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"768C7BE5-040F-4F3B-B62C-03F69D8C4558\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5ECD0992-A16E-46A5-8D34-5E0B99FA8B52\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ECD0C163-1EA5-4587-95F4-EDF7F3266C0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C972A572-9274-4B10-A359-40F200D453A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"26B0922B-986B-4BF1-A6E6-C954AB1A51A4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"53E3F3C8-E27D-42DC-A73F-56F78DCD0828\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:clusterresources:torque_resource_manager:3.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AAC6B2BE-582E-4944-B3A0-AD7A9F626D4C\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.\"}, {\"lang\": \"es\", \"value\": \"Terascale Open-Source Resource y Queue Manager  (tambi\\u00e9n conocido como TORQUE Resource Manager) v3.0.1 y anteriores permite a atacantes remotos evitar la autenticaci\\u00f3n basada en host y enviar trabajos arbitrarios a trav\\u00e9s de una variable PBS_O_HOST modificada para el programa qsub.\"}]",
      "id": "CVE-2011-2907",
      "lastModified": "2024-11-21T01:29:14.980",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2011-08-15T19:55:04.643",
      "references": "[{\"url\": \"http://secunia.com/advisories/45524\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2011/08/11/1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/49119\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=713090\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/69138\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/45524\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2011/08/11/1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/49119\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=713090\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/69138\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-287\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2011-2907\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2011-08-15T19:55:04.643\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.\"},{\"lang\":\"es\",\"value\":\"Terascale Open-Source Resource y Queue Manager  (tambi\u00e9n conocido como TORQUE Resource Manager) v3.0.1 y anteriores permite a atacantes remotos evitar la autenticaci\u00f3n basada en host y enviar trabajos arbitrarios a trav\u00e9s de una variable PBS_O_HOST modificada para el programa qsub.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.0.1\",\"matchCriteriaId\":\"29C0CBAA-E830-41C2-B906-477B4770305C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A0E0AA0-5605-4AFD-9F97-BD8AF651BABC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0p11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4D4148C-AC29-4DAD-B4E4-8F7E31BD07B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA761446-8547-4947-9D4E-E086B87075A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"899B8050-CFAE-433D-812A-5CDEBFDA4567\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C54F40A-E0C8-4C3A-AFAD-95A4DA7EA928\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B26921CD-7FE0-4241-B887-26D430708C11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FD9F5FA-40D5-4C69-8C53-CE562B44022F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6414C31C-687A-4707-B8EB-2F31534EFF3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9269D021-686E-4983-8883-2E5C4BA5A557\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7ACE64A0-D65F-4C14-A231-ED00DB87E2FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A5CD0E9-26BD-44A2-B803-FB9B95E01F78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FC592A6-BBA5-4F28-B3A8-A0B125B6E8A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"305479E9-39E7-4121-8937-C9E44893B9C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C95ADDC1-1F6F-4CAA-94E7-C7B5A503D144\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A7F56B2-0121-4C1B-B08A-7AE0B84755DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"523EB787-7589-4CDE-9213-79139D445C9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9712C71-A018-4526-8434-51E1F5602687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1483A5DA-228C-4CEE-9D1B-728268BCA1E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28F19311-C9B9-4103-893D-6950E992847E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE4DFBE-868E-4A7B-B933-4E3EB4D5F3C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDD8A7A5-8910-4797-A54E-BC427810FB78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0C3BF00-79D6-47CB-9E33-D6BBA4EAFE05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3425F0A-7128-4832-ACB6-8F68CE5EBB6B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2AD53862-C791-4566-999D-3F82982ED609\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"903E8441-F7C4-4BA7-BF5A-34094A040EFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C9F9DF5-EA89-4279-B23A-2AA525A48DEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10175C93-93A0-4C93-883B-F88B4A0DD12E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ACC98979-3F42-41A8-B9E1-7B0DB5398FB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4C90506-2DC2-41AE-B308-F94C1A8847EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54AB15BC-1566-4F82-966D-D5D6929F6F6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"477D5192-5E68-46AB-AB9E-0CE39CBF578D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6ED0C2B-ADE7-4DB6-82CA-B17D7A277A93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAE061D1-0E17-4B6C-A500-F3DA9DDD605E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85EE8536-0C3D-48EC-9D5A-D2504D91814C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E84D3308-08B8-4F41-A089-63C327E61D70\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EA067A0-C187-46B4-A1D8-FCCC5118893D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6464ADEA-13EA-4143-83B3-534CDDA22A1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B8588AF-57AB-4F31-83D4-50225B6A95F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"768C7BE5-040F-4F3B-B62C-03F69D8C4558\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5ECD0992-A16E-46A5-8D34-5E0B99FA8B52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECD0C163-1EA5-4587-95F4-EDF7F3266C0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C972A572-9274-4B10-A359-40F200D453A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26B0922B-986B-4BF1-A6E6-C954AB1A51A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53E3F3C8-E27D-42DC-A73F-56F78DCD0828\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:clusterresources:torque_resource_manager:3.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AAC6B2BE-582E-4944-B3A0-AD7A9F626D4C\"}]}]}],\"references\":[{\"url\":\"http://secunia.com/advisories/45524\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2011/08/11/1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/49119\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=713090\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/69138\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/45524\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2011/08/11/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/49119\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=713090\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/69138\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "current_release_date": "2025-11-21T12:56:20+00:00",
      "cve": "CVE-2011-2907",
      "id": "CVE-2011-2907",
      "initial_release_date": "2011-08-09T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "torque: Authorization Bypass Vulnerability",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-2907.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.