Lucene search

GoogleOSV:GHSA-G283-88V5-RMQ2

HistoryMay 13, 2022 - 1:47 a.m.

SaltStack Salt allows compromised salt-minions to impersonate the salt-master

2022-05-1301:47:12

Google

osv.dev

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

CPENameOperatorVersion
salteq0.9.1
salteq2015.5.0
salteq0.10.2
salteq0.16.4
salteq2016.3.3
salteq0.12.1
salteq0.17.5
salteq2014.1.0
salteq2014.1.4
salteq2015.8.12

Name	Operator	Version
salt	eq	0.9.1
salt	eq	2015.5.0
salt	eq	0.10.2
salt	eq	0.16.4
salt	eq	2016.3.3
salt	eq	0.12.1
salt	eq	0.17.5
salt	eq	2014.1.0
salt	eq	2014.1.4
salt	eq	2015.8.12

Rows per page:

1-10 of 1191

References

docs.saltstack.com/en/2017.7/topics/releases/2016.3.6.html

github.com/saltstack/salt

nvd.nist.gov/vuln/detail/CVE-2017-7893