UBUNTU-CVE-2017-7893

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...

PYSEC-2018-50

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...

CVE-2017-7893

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...

PYSEC-2018-50

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...

Design/Logic Flaw

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...

CVE-2017-7893

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...

CVE-2017-7893

Affected product: SaltStack Salt up to version 2016.3.6. Issue: compromised salt-minions can impersonate the salt-master, enabling impersonation of the master and potential leakage or manipulation of configurations. Impact: per NVD metrics, base CVSSv3 of 9.8 (CRITICAL) with network attack, low c...

jira2.salt-solutions.de XSS vulnerability

Open Bug Bounty ID: OBB-604416 Description| Value ---|--- Affected Website:| jira2.salt-solutions.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Information Disclosure

salt is vulnerable to information disclosure attacks. The vulnerability exists through persisted accumulator files as they usually have the default word-readable permissions, specified by umask, allowing anyone to read it...

Unspecified Vulnerability in DocuTrac QuicDoc and Office Therapy DTISQLInstaller.exe

DocuTrac QuicDoc and Office Therapy are both products of DocuTrac, Inc.DocuTrac QuicDoc is a behavioral health management software for healthcare teams.Office Therapy is an office practice management system.DTISQLInstaller.exe is one of the DTISQLInstaller.exe is one of the executable programs. A...

CVE-2018-5552

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper"...

Hardcoded credentials

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper"...

CVE-2018-5552

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper"...

CVE-2018-5552 DocuTrac DTISQLInstaller.exe Hard-Coded Salt

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper"...

CVE-2018-5552

CVE-2018-5552 affects DocuTrac QuicDoc and Office Therapy installers (DTISQLInstaller.exe, v1.6.4.0 and earlier). The root cause, per connected sources, is a hard-coded cryptographic salt named “S@l+&pepper” embedded in the installer. The documents do not specify the exact impact, attack vectors,...

local.ksl.com XSS vulnerability

Open Bug Bounty ID: OBB-573285 Description| Value ---|--- Affected Website:| local.ksl.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0106

An update of 'salt' packages of Photon OS has been released...

Primefaces 5.x - Remote Code Execution Exploit

Exploit for java platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CVE-2017-1000486 Primefaces Remote Code Execution Exploit', 'Description' = %q This module...

SUSE SLES11 Security Update : Salt (SUSE-SU-2017:3381-1)

This update for salt fixes one security issue and bugs. The following security issues have been fixed : - CVE-2017-14695: A directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. bsc1062462 -...

SUSE-SU-2017:3381-1 Security update for Salt

This update for salt fixes one security issue and bugs. The following security issues have been fixed: - CVE-2017-14695: A directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. bsc1062462 -...