Executive Summary

This vulnerability exists in Altair Grid Engine versions prior to V2026.0.0, where the software improperly handles error messages during user authentication. As a result, it discloses sensitive password hash information. A local attacker could exploit this flaw to extract password hashes of privileged accounts and then attempt offline brute-force attacks to recover the actual passwords.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow a local attacker to obtain password hashes for privileged accounts. This could lead to unauthorized access if the attacker successfully cracks the hashes through offline brute-force attacks, potentially compromising sensitive systems and data.

Useful 0 Not Useful 0