Unrated
HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.
CVE-2021-25312
First seen on SecPulse
References
- advisory research.cs.wisc.edu