Описание
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| salt | fixed | 0.17.1+dfsg-1 | package |
EPSS
Процентиль: 79%
0.01824
Низкий
Связанные уязвимости
ubuntu
около 13 лет назад
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.
nvd
около 13 лет назад
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.
altlinux
почти 13 лет назад
ALT-PU-2013-1179: package `salt` update to version 0.17.2-alt1
EPSS
Процентиль: 79%
0.01824
Низкий