CVE-2021-45103

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-532

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-451047.4An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfCVE-2021-451055.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referentCVE-2021-451066.5A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a dCVE-2021-451118.1Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to triggerCVE-2021-451157.5An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred signCVE-2021-451167.5An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template LanguageCVE-2021-451176.5The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.CVE-2021-452228.8An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to priviCVE-2021-452236.5An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service aCVE-2021-452246.1An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a UCVE-2021-452256.1An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site scCVE-2021-452266.5An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause i
CVE-2021-45103: High severity, CVSS 8.1 | Vulnix