PYSEC-2013-15

2013-11-0518:55:00

Google

osv.dev

0.005 Low

EPSS

Percentile

75.9%

JSON

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.

CPENameOperatorVersion
salteq0.15.90
salteq0.13.2
salteq0.13.0
salteq0.16.1
salteq0.17.0
salteq0.12.0
salteq0.13.1
salteq0.15.2
salteq0.15.0
salteq0.15.1