Описание
Salt's file contents overwrite the VirtKey class
File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location and is present in the default configuration.
Пакеты
salt
>= 3007.0rc1, < 3007.4
3007.4
salt
>= 3006.0rc1, < 3006.12
3006.12
Связанные уязвимости
File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location and is present in the default configuration.
File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location and is present in the default configuration.
File contents overwrite the VirtKey class is called when \u201con-dema ...
Уязвимость функции VirtKey системы управления конфигурациями и удалённого выполнения операций Salt, позволяющая нарушителю обойти установленные ограничения безопасности
