Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-6617
HistoryNov 05, 2013 - 12:00 a.m.

CVE-2013-6617

2013-11-0500:00:00
ubuntu.com
ubuntu.com
7

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

75.9%

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not
properly drop group privileges, which makes it easier for remote attackers
to gain privileges.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

75.9%