Filtered by vendor Siemens Subscriptions
Filtered by product Altair Grid Engine Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-40760 1 Siemens 1 Altair Grid Engine 2025-11-12 5.5 Medium
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.
CVE-2025-40763 1 Siemens 1 Altair Grid Engine 2025-11-12 7.8 High
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary code with superuser privileges by manipulating the environment variable and placing a malicious library in the controlled path.