Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel.
The information has been provided by Vendor
The original article can be found at:https://lists.schedmd.com/pipermail/slurm-announce/2020/000036.html
A race condition allows a user to launch a process as an arbitrary user.
Slurm 19.05.x before 19.05.7
Slurm 20.02.x before 20.02.3