4.9
CVSSv2

CVE-2013-4439

Published: 05/11/2013 Updated: 07/11/2013
CVSS v2 Base Score: 4.9 | Impact Score: 4.9 | Exploitability Score: 6.8
VMScore: 436
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N

Vulnerability Summary

Salt (aka SaltStack) prior to 0.15.0 up to and including 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

saltstack salt 0.15.0

saltstack salt 0.15.1

saltstack salt 0.16.0

saltstack salt 0.16.2

saltstack salt 0.16.3

saltstack salt 0.16.4

saltstack salt 0.17.0

Vendor Advisories

Debian Bug report logs - #726480 salt: Multiple security issues Package: salt; Maintainer for salt is Debian Salt Team <pkg-salt-team@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Wed, 16 Oct 2013 06:39:02 UTC Severity: grave Tags: security Fixed in version salt/0171+dfsg-1 Done ...