saltstack salt 2016.11.5 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in minion id validation in SaltStack Salt prior to 2016.3.8, 2016.11.x prior to 2016.11.8, and 2017.7.x prior to 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerabili...

Saltstack Salt 2016.11.0 Saltstack Salt 2016.11 Saltstack Salt Saltstack Salt 2017.7.0 Saltstack Salt 2016.11.2 Saltstack Salt 2016.11.1 Saltstack Salt 2016.11.7 Saltstack Salt 2016.11.6 Saltstack Salt 2016.11.5 Saltstack Salt 2016.11.4 Saltstack Salt 2017.7.1 Saltstack Salt 2016.11.3

SaltStack Salt prior to 2016.3.8, 2016.11.x prior to 2016.11.8, and 2017.7.x prior to 2017.7.2 allows remote malicious users to cause a denial of service via a crafted authentication request.

Saltstack Salt Saltstack Salt 2016.11 Saltstack Salt 2016.11.0 Saltstack Salt 2016.11.1 Saltstack Salt 2016.11.2 Saltstack Salt 2017.7.0 Saltstack Salt 2016.11.4 Saltstack Salt 2016.11.5 Saltstack Salt 2016.11.6 Saltstack Salt 2016.11.7 Saltstack Salt 2016.11.3 Saltstack Salt 2017.7.1

An issue exists in through SaltStack Salt prior to 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook