Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2013-6617

Disclosure Date: November 05, 2013 (last updated October 05, 2023)
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
0
0
Attacker Value
Unknown

CVE-2013-4436

Disclosure Date: November 05, 2013 (last updated October 05, 2023)
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.
0
0
Attacker Value
Unknown

CVE-2013-4435

Disclosure Date: November 05, 2013 (last updated October 05, 2023)
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
0
0
Attacker Value
Unknown

CVE-2013-4439

Disclosure Date: November 05, 2013 (last updated October 05, 2023)
Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.
0
0
Attacker Value
Unknown

CVE-2013-4437

Disclosure Date: November 05, 2013 (last updated October 05, 2023)
Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."
0
0