Lucene search

SaltStack Salt Directory traversal vulnerability in minion id validation

🗓️ 17 May 2022 00:32:24Reported by GitHub Advisory DatabaseType

Directory traversal vulnerability in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.

Reporter	Title	Published	Views	Family All 45
OSV	SaltStack Salt Directory traversal vulnerability in minion id validation	17 May 202200:24	–	osv
OSV	CVE-2017-14695	24 Oct 201717:29	–	osv
OSV	PYSEC-2017-36	24 Oct 201717:29	–	osv
OSV	SaltStack Salt Directory traversal vulnerability in minion id validation	17 May 202201:22	–	osv
OSV	PYSEC-2017-35	23 Aug 201714:29	–	osv
OSV	CVE-2017-12791	23 Aug 201714:29	–	osv
OSV	salt vulnerabilities	15 Mar 202120:11	–	osv
Cvelist	CVE-2017-14695	24 Oct 201717:00	–	cvelist
Cvelist	CVE-2017-12791	23 Aug 201714:00	–	cvelist
Debian CVE	CVE-2017-14695	24 Oct 201717:29	–	debiancve

Vulners

Node

saltstack saltRange2017.7.0–2017.7.2

saltstack saltRange2016.11.0–2016.11.8

saltstack saltRange<2016.3.8

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-14695
github	www.github.com/saltstack/salt/commit/80d90307b07b3703428ecbb7c8bb468e28a9ae6d
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
docs	www.docs.saltstack.com/en/latest/topics/releases/2016.11.8.html
docs	www.docs.saltstack.com/en/latest/topics/releases/2016.3.8.html
docs	www.docs.saltstack.com/en/latest/topics/releases/2017.7.2.html
lists	www.lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
lists	www.lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
github	www.github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-36.yaml
github	www.github.com/advisories/GHSA-j6gj-pg62-x8j6

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2022 00:24Current

9.2High risk

Vulners AI Score9.2

CVSS27.5

CVSS39.8

EPSS0.0075

CWE-22