Inspur ClusterEngine Privilege Escalation Vulnerability in getJobsByShell Component

A privilege escalation vulnerability has been identified in Inspur ClusterEngine version 4.0. This issue arises from an improper SUID configuration in the component '/opt/tsce4/torque6/bin/getJobsByShell', allowing non-administrative users to gain root access by exploiting the SUID mechanism. The vulnerability enables these users to execute arbitrary commands with elevated privileges.

Impact

Exploitation of this vulnerability allows non-administrative users to gain root access on the affected system.

Reproduction

To reproduce this vulnerability, a non-administrative user can execute the 'getJobsByShell' component with a command shell as an argument. This will trigger the SUID privilege escalation, resulting in root access.

Remediation

Users are advised to upgrade the relevant components to address this vulnerability.