{"api_version":"1","generated_at":"2026-07-23T05:35:36+00:00","cve":"CVE-2011-2907","urls":{"html":"https://cve.report/CVE-2011-2907","api":"https://cve.report/api/cve/CVE-2011-2907.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-2907","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-2907"},"summary":{"title":"CVE-2011-2907","description":"Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.","state":"PUBLISHED","assigner":"redhat","published_at":"2011-08-15 19:55:04","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html","name":"http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[torqueusers] [torquedev]\tTORQUE\tauthorization\tsecurity\tvulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69138","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69138","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/45524","name":"http://secunia.com/advisories/45524","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"TORQUE Resource Manager Authentication Bypass Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2011/08/11/1","name":"http://www.openwall.com/lists/oss-security/2011/08/11/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - CVE-2011-2907: authentication bypass in torque","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713090","name":"https://bugzilla.redhat.com/show_bug.cgi?id=713090","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug 713090 – CVE-2011-2907 torque: Authorization Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/49119","name":"http://www.securityfocus.com/bid/49119","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Torque Server Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296","name":"https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SVG:Advisory-SVG-2011-2296 - EGIWiki","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2907","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2907","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.0p11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.3.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.4.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"2.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"3.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2907","vulnerable":"1","versionEndIncluding":"3.0.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"clusterresources","cpe5":"torque_resource_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:15:31.645Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713090"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296"},{"name":"[torqueusers] 20110809 TORQUE authorization security vulnerability","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html"},{"name":"49119","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/49119"},{"name":"45524","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/45524"},{"name":"torque-resource-manager-pbsohost-sec-bypass(69138)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69138"},{"name":"[oss-security] 20110810 CVE-2011-2907: authentication bypass in torque","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2011/08/11/1"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-08-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713090"},{"tags":["x_refsource_MISC"],"url":"https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296"},{"name":"[torqueusers] 20110809 TORQUE authorization security vulnerability","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html"},{"name":"49119","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/49119"},{"name":"45524","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/45524"},{"name":"torque-resource-manager-pbsohost-sec-bypass(69138)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69138"},{"name":"[oss-security] 20110810 CVE-2011-2907: authentication bypass in torque","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2011/08/11/1"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2011-2907","datePublished":"2011-08-15T19:00:00.000Z","dateReserved":"2011-07-27T00:00:00.000Z","dateUpdated":"2024-08-06T23:15:31.645Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-08-15 19:55:04","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"29C0CBAA-E830-41C2-B906-477B4770305C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3A0E0AA0-5605-4AFD-9F97-BD8AF651BABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0p11:*:*:*:*:*:*:*","matchCriteriaId":"C4D4148C-AC29-4DAD-B4E4-8F7E31BD07B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EA761446-8547-4947-9D4E-E086B87075A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"899B8050-CFAE-433D-812A-5CDEBFDA4567"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8C54F40A-E0C8-4C3A-AFAD-95A4DA7EA928"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B26921CD-7FE0-4241-B887-26D430708C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0FD9F5FA-40D5-4C69-8C53-CE562B44022F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"6414C31C-687A-4707-B8EB-2F31534EFF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"9269D021-686E-4983-8883-2E5C4BA5A557"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"7ACE64A0-D65F-4C14-A231-ED00DB87E2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"0A5CD0E9-26BD-44A2-B803-FB9B95E01F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC592A6-BBA5-4F28-B3A8-A0B125B6E8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"305479E9-39E7-4121-8937-C9E44893B9C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C95ADDC1-1F6F-4CAA-94E7-C7B5A503D144"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4A7F56B2-0121-4C1B-B08A-7AE0B84755DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"523EB787-7589-4CDE-9213-79139D445C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"C9712C71-A018-4526-8434-51E1F5602687"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1483A5DA-228C-4CEE-9D1B-728268BCA1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"28F19311-C9B9-4103-893D-6950E992847E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1FE4DFBE-868E-4A7B-B933-4E3EB4D5F3C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"CDD8A7A5-8910-4797-A54E-BC427810FB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B0C3BF00-79D6-47CB-9E33-D6BBA4EAFE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"E3425F0A-7128-4832-ACB6-8F68CE5EBB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"2AD53862-C791-4566-999D-3F82982ED609"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"903E8441-F7C4-4BA7-BF5A-34094A040EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.3.13:*:*:*:*:*:*:*","matchCriteriaId":"4C9F9DF5-EA89-4279-B23A-2AA525A48DEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"10175C93-93A0-4C93-883B-F88B4A0DD12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"ACC98979-3F42-41A8-B9E1-7B0DB5398FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D4C90506-2DC2-41AE-B308-F94C1A8847EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"54AB15BC-1566-4F82-966D-D5D6929F6F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"477D5192-5E68-46AB-AB9E-0CE39CBF578D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"E6ED0C2B-ADE7-4DB6-82CA-B17D7A277A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"EAE061D1-0E17-4B6C-A500-F3DA9DDD605E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"85EE8536-0C3D-48EC-9D5A-D2504D91814C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"E84D3308-08B8-4F41-A089-63C327E61D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"0EA067A0-C187-46B4-A1D8-FCCC5118893D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"6464ADEA-13EA-4143-83B3-534CDDA22A1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"7B8588AF-57AB-4F31-83D4-50225B6A95F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"768C7BE5-040F-4F3B-B62C-03F69D8C4558"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5ECD0992-A16E-46A5-8D34-5E0B99FA8B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"ECD0C163-1EA5-4587-95F4-EDF7F3266C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C972A572-9274-4B10-A359-40F200D453A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"26B0922B-986B-4BF1-A6E6-C954AB1A51A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"53E3F3C8-E27D-42DC-A73F-56F78DCD0828"},{"vulnerable":true,"criteria":"cpe:2.3:a:clusterresources:torque_resource_manager:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AAC6B2BE-582E-4944-B3A0-AD7A9F626D4C"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"2907","Ordinal":"1","Title":"CVE-2011-2907","CVE":"CVE-2011-2907","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"2907","Ordinal":"1","NoteData":"Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.","Type":"Description","Title":"CVE-2011-2907"},{"CveYear":"2011","CveId":"2907","Ordinal":"2","NoteData":"2011-08-15","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"2907","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}