CVE-2021-45104

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-319

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006/Broken Link
https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0002Mitigation, Vendor Advisory
https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006/Broken Link
https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0002Mitigation, Vendor Advisory

Timeline

Published: Apr 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-451055.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referent CVE-2021-451066.5A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a d CVE-2021-451118.1Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger CVE-2021-451157.5An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred sign CVE-2021-451167.5An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language CVE-2021-451176.5The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.CVE-2021-452228.8An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to privi CVE-2021-452236.5An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service a CVE-2021-452246.1An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a U CVE-2021-452256.1An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site sc CVE-2021-452266.5An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause i CVE-2021-452275.4An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionalit