GitHub Advisoryadvisory · PyPI

GHSA-g283-88v5-rmq2 SaltStack Salt allows compromised salt-minions to impersonate the salt-master

CRITICAL Published 2022-05-13 Modified 2024-10-26 Official page ↗

Aliases: CVE-2017-7893
Ecosystem: PyPI
Packages: salt
Severity: Critical
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reviewed: 2024-04-22

Affected packages

• PyPI salt: < 2016.3.6 → fixed in 2016.3.6

Description

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

Related

Alias · CVE (1)

CVE-2017-7893 In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master. vulnerability

References