CVEvulnerability
CVE-2013-6617
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-11-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
Affected configurations
• saltstack salt 0.11.0
• saltstack salt 0.12.0
• saltstack salt 0.13.0
• saltstack salt 0.14.0
• saltstack salt 0.15.0
• saltstack salt 0.15.1
• saltstack salt 0.16.0
• saltstack salt 0.16.2
• saltstack salt 0.16.3
• saltstack salt 0.16.4
• saltstack salt 0.17.0
Related
Weakness · not in database (1)
References
- http://docs.saltstack.com/topics/releases/0.17.1.html docs.saltstack.com
- http://docs.saltstack.com/topics/releases/0.17.1.html docs.saltstack.com