3 matches found
Salt Improper Access Control
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...
8.1CVSS7.8AI score0.01516EPSS
SaveExploits0References5Affected Software1
PYSEC-2016-23
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...
8.1CVSS7.9AI score0.01516EPSS
SaveExploits0References3Affected Software1
UBUNTU-CVE-2016-1866
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...
8.1CVSS7.6AI score0.01516EPSS
SaveExploits0References3
20