Lucene search
GoogleOSV:GHSA-JMV9-5GX8-7XPFHistoryMay 17, 2022 - 4:58 a.m.
Minion identity not validated in saltstack
2022-05-1704:58:30
Google
osv.dev
13
0.002 Low
EPSS
Percentile
53.7%
Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.
References
docs.saltstack.com/topics/releases/0.17.1.html
www.openwall.com/lists/oss-security/2013/10/18/3
github.com/advisories/GHSA-jmv9-5gx8-7xpf
github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2013-14.yaml
github.com/saltstack/salt
github.com/saltstack/salt/pull/7356
nvd.nist.gov/vuln/detail/CVE-2013-4439
Related
cve
cve
CVE-2013-4439
2022-10-03 16:14:58
nessus
nessus
Fedora 19 : salt-0.17.1-1.fc19 (2013-19356)
2013-10-27 00:00:00
Fedora 18 : salt-0.17.1-1.fc18 (2013-19354)
2013-10-28 00:00:00
Fedora 20 : salt-0.17.1-1.fc20 (2013-19438)
2013-11-11 00:00:00
openvas
openvas
Fedora Update for salt FEDORA-2013-19356
2013-10-28 00:00:00
Fedora Update for salt FEDORA-2013-19354
2013-10-28 00:00:00
Fedora Update for salt FEDORA-2013-19356
2013-10-28 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: salt-0.17.1-1.fc19
2013-10-27 03:53:29
[SECURITY] Fedora 19 Update: salt-0.17.1-1.fc19
2013-10-27 05:32:16
[SECURITY] Fedora 18 Update: salt-0.17.1-1.fc18
2013-10-27 05:35:52
nvd
nvd
CVE-2013-4439
2013-11-05 18:55:05
osv
osv
PYSEC-2013-14
2013-11-05 18:55:00
github
github
Minion identity not validated in saltstack
2022-05-17 04:58:30
prion
prion
Code injection
2013-11-05 18:55:00
debiancve
debiancve
CVE-2013-4439
2022-10-03 16:14:58
cvelist
cvelist
CVE-2013-4439
2022-10-03 16:14:58
ubuntucve
ubuntucve
CVE-2013-4439
2013-11-05 00:00:00