CVE-2021-43337: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_script and/or job_env options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Schedmd Slurm: from 21.08.0, before 21.08.4 (fixed in 21.08.4)

Published 2021-11-17. Last modified 2026-06-17.