PYSEC-2013-13

Salt aka SaltStack before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe...

PT-2013-5017

Name of the Vulnerable Software and Affected Versions Salt aka SaltStack versions prior to 0.17.1 Description The issue allows remote attackers to execute arbitrary YAML code. The vendor has noted that this might not be considered a vulnerability because the YAML to be loaded has already been...

PT-2013-5304

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 3.0.1 Description The issue allows attackers to execute arbitrary YAML code via a crafted report-specific type in the dashboard report. Recommendations For versions prior to 3.0.1, update to version 3.0.1 or...

CVE-2013-4957: Improper Control of Generation of Code

The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type...