CVE-2016-1866

Salt 2015.8.x before 2015.8.4 is vulnerable due to improper handling of clear messages on the minion, enabling a man-in-the-middle to insert packets into the minion-master data stream and execute arbitrary code. A patch is available in Salt 2015.8.4 (and later) to fix this. The CVSS context from ...