CVE-2012-3493

CVE-2012-3493 describes an information disclosure vulnerability in Condor versions 7.6.x before 7.6.10 and 7.8.x before 7.8.4. Specifically, the command_give_request_ad function in condor_startd.V6/command.cpp allows remote attackers to obtain sensitive ClaimId information via a ClassAd request to the condor_startd port, potentially leading to control or arbitrary job execution. With a CVSS score of 5.8 (Medium), this vulnerability has a network attack vector and medium attack complexity, resulting in partial confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.