UBUNTU-CVE-2016-9639

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...

CVE-2016-9639

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...

CVE-2016-9639

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...

CVE-2016-9639

CVE-2016-9639 affects Salt before 2015.8.11. The issue arises from caching behavior that allows deleted minions to read or write to other minions sharing the same id. Affected component: Salt minion management; root cause: improper handling of cached keys/minion identity. Impact per the provided ...

CVE-2016-9639

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...

CVE-2016-9639

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...

CVE-2016-9639

Removed by vendor...

CVE-2016-9639: Improper Access Control

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...

CVE-2016-3034

IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily...

Insecure Salt Generation Via Unsafe Pseudorandom Number Function

Fluentd has an insecure generate of salt values. This is because OpenSSL::Random was used rather than a SecureRandom function to generate the values...

PT-2017-8308

Name of the Vulnerable Software and Affected Versions IBM AppScan Source affected versions not specified Description The issue concerns the use of a one-way hash without salt to encrypt highly sensitive information. This could allow a local attacker to decrypt the information more easily...

CVE-2016-3176

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

Authentication flaw

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

PYSEC-2017-33

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

UBUNTU-CVE-2016-3176

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

CVE-2016-3176

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

PYSEC-2017-33

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

CVE-2016-3176

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

CVE-2016-3176

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

CVE-2016-3176

CVE-2016-3176 affects Salt with PAM external authentication enabled. Vulnerable: Salt releases prior to 2015.5.10 and 2015.8.x before 2015.8.8. Issue: attackers can bypass the configured authentication service by passing an alternate service with a command sent to LocalClient. Impact is limited t...