Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2022/05/17 2:46 a.m.•38 views

SaltStack Salt Information Exposure

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions clients...

7.8CVSS7.6AI score0.00434EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2017/04/25 5:59 p.m.•37 views

PYSEC-2017-82

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions clients...

7.8CVSS3.5AI score0.00434EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2017/04/25 5:00 p.m.•74 views

CVE-2017-8109

Removed by vendor...

7.8CVSS7.8AI score0.00434EPSS
SaveExploits0
CVE
CVE
•added 2017/04/25 5:00 p.m.•97 views

CVE-2017-8109

The CVE-2017-8109 entry concerns SaltStack Salt 2016.11 before 2016.11.4, where the salt-ssh minion copied configuration from the Salt Master without adjusting permissions, potentially leaking credentials to local attackers on configured minions. Public writeups in the connected docs confirm the ...

7.8CVSS7.4AI score0.00434EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/25 12:00 a.m.•3 views

CVE-2017-8109: Exposure of Sensitive Information to an Unauthorized Actor

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions clients...

7.8CVSS8AI score0.00434EPSS
SaveExploits0References2
Rows per page
Query Builder