Skip to content
Fencer Intel
high 7.5

CVE-2010-4179 json

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so…

published 15y ago modified 4mo ago also EUVD-2010-4154

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.8%
EPSS 1.8% chance of exploitation in 30 days, percentile 78%
public exploits
0
none known

Summary

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.

Patch / fix

  • qmf enterprise mrg 1.0 0.7.946106-22.el4
  • condor enterprise mrg 1.0 7.4.4-0.17.el4
  • sesame enterprise mrg 1.0 0.7.4297-4.el4
  • qpid-java enterprise mrg 1.0 0.7.946106-12.el4
  • condor-qmf enterprise mrg 1.0 7.4.4-0.17.el4
  • python-qmf enterprise mrg 1.0 0.7.946106-14.el4
  • condor-kbdd enterprise mrg 1.0 7.4.4-0.17.el4
  • qpid-cpp-mrg enterprise mrg 1.0 0.7.946106-22.el4

red hat advisories RHSA-2010:0922RHSA-2010:0921

Is CVE-2010-4179 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2010-4179 updated cvss 7.5

plugin: enable QUEUE_ALL_USERS_TRUSTED for Submit/Hold/Release/Remove ops

  • Red Hat MRG Grid Execute Node for RHEL 5 Server condor 7.4.4-0.17.el5, condor-qmf 7.4.4-0.17.el5, condor-kbdd 7.4.4-0.17.el5, condor-vm-gahp 7.4.4-0.17.el5 Red Hat MRG Grid for RHEL 5 Server condor 7.4.4-0.17.el5, condor-qmf 7.4.4-0.17.el5, condor-kbdd 7.4.4-0.17.el5, condor-vm-gahp 7.4.4-0.17.el5 Red Hat MRG Management for RHEL 5 Server cumin 0.1.4410-2.el5
    fixed: vendor fix RHSA-2010:0921
  • Red Hat MRG Grid Execute Node for RHEL-4 AS condor 7.4.4-0.17.el4, condor-qmf 7.4.4-0.17.el4, condor-kbdd 7.4.4-0.17.el4 Red Hat MRG Grid Execute Node for RHEL-4 ES condor 7.4.4-0.17.el4, condor-qmf 7.4.4-0.17.el4, condor-kbdd 7.4.4-0.17.el4 Red Hat MRG Grid for RHEL-4 AS condor 7.4.4-0.17.el4, condor-qmf 7.4.4-0.17.el4, condor-kbdd 7.4.4-0.17.el4 Red Hat MRG Grid for RHEL-4 ES condor 7.4.4-0.17.el4, condor-qmf 7.4.4-0.17.el4, condor-kbdd 7.4.4-0.17.el4
    fixed: vendor fix RHSA-2010:0922
  • Red Hat MRG Messaging Base for RHEL 5 Server qmf 0.7.946106-22.el5, sesame 0.7.4297-4.el5, ruby-qmf 0.7.946106-22.el5, qpid-java 0.7.946106-12.el5, python-qmf 0.7.946106-14.el5, qpid-cpp-mrg 0.7.946106-22.el5, +7 more
    fixed: vendor fix RHSA-2010:0921
  • Red Hat MRG Messaging Base for RHEL-4 AS qmf 0.7.946106-22.el4, sesame 0.7.4297-4.el4, qpid-java 0.7.946106-12.el4, python-qmf 0.7.946106-14.el4, qpid-cpp-mrg 0.7.946106-22.el4, qpid-cpp-client 0.7.946106-22.el4, +8 more Red Hat MRG Messaging Base for RHEL-4 ES qmf 0.7.946106-22.el4, sesame 0.7.4297-4.el4, qpid-java 0.7.946106-12.el4, python-qmf 0.7.946106-14.el4, qpid-cpp-mrg 0.7.946106-22.el4, qpid-cpp-client 0.7.946106-22.el4, +8 more
    fixed: vendor fix RHSA-2010:0922
  • Red Hat MRG Messaging for RHEL 5 Server qmf 0.7.946106-22.el5, sesame 0.7.4297-4.el5, ruby-qmf 0.7.946106-22.el5, qpid-java 0.7.946106-12.el5, python-qmf 0.7.946106-14.el5, qpid-cpp-mrg 0.7.946106-22.el5, +13 more
    fixed: vendor fix RHSA-2010:0921
  • Red Hat MRG Messaging for RHEL-4 AS qmf 0.7.946106-22.el4, sesame 0.7.4297-4.el4, qpid-java 0.7.946106-12.el4, python-qmf 0.7.946106-14.el4, qpid-cpp-mrg 0.7.946106-22.el4, qpid-cpp-client 0.7.946106-22.el4, +9 more Red Hat MRG Messaging for RHEL-4 ES qmf 0.7.946106-22.el4, sesame 0.7.4297-4.el4, qpid-java 0.7.946106-12.el4, python-qmf 0.7.946106-14.el4, qpid-cpp-mrg 0.7.946106-22.el4, qpid-cpp-client 0.7.946106-22.el4, +9 more
    fixed: vendor fix RHSA-2010:0922

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.79% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.