Описание
Salt vulnerable to arbitrary event injection
Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's event bus.
Пакеты
Наименование
salt
pip
Затронутые версииВерсия исправления
>= 3006.0rc1, < 3006.12
3006.12
Наименование
salt
pip
Затронутые версииВерсия исправления
>= 3007.0rc1, < 3007.4
3007.4
Связанные уязвимости
CVSS3: 8.1
ubuntu
3 месяца назад
Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's event bus.
CVSS3: 8.1
nvd
3 месяца назад
Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's event bus.
CVSS3: 8.1
debian
3 месяца назад
Arbitrary event injection on Salt Master. The master's "_minion_event" ...
