CVE-2021-45102: Wisc Htcondor

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2. When authenticating to an HTCondor daemon using a SciToken, a user may be granted authorizations beyond what the token should allow.

Affected products

• Wisc Htcondor: version 9.0.0 only; version 9.0.1 only; version 9.0.2 only; version 9.1.0 only

Published 2021-12-16. Last modified 2026-06-17.