CVE-2021-45104
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who...
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
7.4
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
- Record
CVE-2021-45104- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
- Record
CVE-2021-45104- Updated
- 2026-11-02
EUVDEUVD-2021-31895 No score
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
- Record
EUVD-2021-31895- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6j9j-gvj5-p6jx
7.4
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who...
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
- Record
GHSA-6j9j-gvj5-p6jx- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-326
- Updated
- 2026-11-02
OSV
7.4
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
- Record
CVE-2021-45104- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-45104
7.4
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
- Record
UBUNTU-CVE-2021-45104- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11976-1 No score
htcondor-9.0.11-1.1 on GA media
These are all security issues fixed in the htcondor-9.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11976-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
condorUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 7.8.8~dfsg.1-27.8.8~dfsg.1-2.18.0.5~dfsg.1-1ubuntu18.0.5~dfsg.1-1ubuntu1+esm1 |
None known |
condorUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 8.2.9~dfsg.1-18.4.2~dfsg.1-18.4.2~dfsg.1-1build18.4.2~dfsg.1-1ubuntu0.1~esm1 |
None known |
condorUbuntu:18.04:LTS |
All versions, plus listed versions 8.4.11~dfsg.1-28.4.11~dfsg.1-38.6.8~dfsg.1-18.6.8~dfsg.1-2 |
None known |
condorUbuntu:20.04:LTS |
All versions, plus listed versions 8.6.8~dfsg.1-2build18.6.8~dfsg.1-2ubuntu1 |
None known |
condorUbuntu:24.04:LTS |
All versions, plus listed versions 23.2.0+dfsg-123.2.0+dfsg-223.4.0+dfsg-123.4.0+dfsg-1ubuntu223.4.0+dfsg-1ubuntu323.4.0+dfsg-1ubuntu423.4.0+dfsg-1ubuntu4.1 |
None known |
condorUbuntu:25.10 |
All versions, plus listed versions 23.6.2+dfsg-2build123.9.6+dfsg-223.9.6+dfsg-2build123.9.6+dfsg-2.123.9.6+dfsg-2.1build2 |
None known |
condorUbuntu:26.10 |
All versions, plus listed versions 25.6.1+dfsg-125.8.2+dfsg-125.10.1+dfsg-125.10.1+dfsg-225.11.0+dfsg-125.12.2+dfsg-1 |
None known |
condorUbuntu:26.04:LTS |
All versions, plus listed versions 23.9.6+dfsg-2.1build225.6.1+dfsg-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-45104 is a high vulnerability (CVSS 7.4) in Wisc Htcondor, published April 6, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. No source names a fixed version.
References
research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006
research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0002
nvd.nist.gov/vuln/detail/CVE-2021-45104
github.com/advisories/GHSA-6j9j-gvj5-p6jx
ubuntu.com/security/CVE-2021-45104
htcondor.org/security/vulnerabilities/HTCONDOR-2022-0002