CVEvulnerability
CVE-2013-4435
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-11-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
Affected configurations
• saltstack salt 0.15.0
• saltstack salt 0.15.1
• saltstack salt 0.16.0
• saltstack salt 0.16.2
• saltstack salt 0.16.3
• saltstack salt 0.16.4
• saltstack salt 0.17.0
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://docs.saltstack.com/topics/releases/0.17.1.html Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/10/18/3 www.openwall.com
- http://docs.saltstack.com/topics/releases/0.17.1.html Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/10/18/3 www.openwall.com