Jump to content
  • Announcements

    • admin

      PBS Forum Has Closed   06/12/17

      The PBS Works Support Forum is no longer active.  For PBS community-oriented questions and support, please join the discussion at http://community.pbspro.org.  Any new security advisories related to commercially-licensed products will be posted in the PBS User Area (https://secure.altair.com/UserArea/). 
Sign in to follow this  
Bill Nitzberg

Security Bulletin PBS10-01

Recommended Posts

DESCRIPTION:

Altair Engineering is releasing this advisory to customers running PBS Professional to alert them to a security vulnerability. This vulnerability only affects customers who supply user passwords on the command line via “qsub –Wpwd=<password>”. To the best of our knowledge, this vulnerability is not publicly known at this time.

An attacker who successfully exploits this vulnerability could gain access to a PBS user’s password on the system or systems running PBS Professional, thus allowing the attacker to perform actions as that user.

SEVERITY RATING: Major

RECOMMENDATION:

Although we do not view this vulnerability as Critical, we take security very seriously, and recommend that customers who find themselves vulnerable to this defect, that is, those using the “qsub –W pwd=<password>” command, apply this update in a timely fashion.

AFFECTED SOFTWARE:

PBS Professional Versions: Only 10.1.x versions of PBS Professional

SCHEDULE OF AVAILABILITY OF UPDATE:

The following summarizes the availability of updates for various versions of

PBS Professional:

PBS Professional 10.1 Available Now as v10.1.6

PBS Professional 10.2 Available Now as v10.2

SECURITY UPDATE:

The following updates and packages are being made available to all customers running PBS Professional software. For customers with current maintenance and support contracts, the updates are available from the user login area of the PBS Professional website. For customers who do not have access to this area, please see below for instructions on getting the required update. Please refer to the included release notes and installation instructions included in each package.

INSTRUCTIONS TO OBTAIN UPDATE:

For customers with active support, please go to:

http://www.pbspro.com/UserArea/

log in with your site ID and password to obtain the desired packages.

For customers without active support, please send an email to:

pbssupport@altair.com

Please include the version of PBS Professional you are running,

the operating system you are using, and the hardware/platform you are running on.

This will help us expedite your request.

Please contact pbssupport@altair.com if you need additional information.

Share this post


Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Sign in to follow this  

×