Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью
CVSS4: 8.7
CVSS3: 7.5
Описание
SaltStack Privilege Escalation vulnerability
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
Пакеты
Наименование
salt
pip
Затронутые версииВерсия исправления
>= 0.11.0, < 0.17.1
0.17.1
Связанные уязвимости
ubuntu
почти 13 лет назад
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
nvd
почти 13 лет назад
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
debian
почти 13 лет назад
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not ...