Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью
CVSS4: 8.7
CVSS3: 7.5
Описание
SaltStack Privilege Escalation vulnerability
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
Пакеты
Наименование
salt
pip
Затронутые версииВерсия исправления
>= 0.11.0, < 0.17.1
0.17.1
Связанные уязвимости
ubuntu
больше 12 лет назад
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
nvd
больше 12 лет назад
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
debian
больше 12 лет назад
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not ...