Описание
SaltStack MITM SSH attack in salt-ssh
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.
Пакеты
salt
= 0.17.0
0.17.1
Связанные уязвимости
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 ...
ALT-PU-2013-1179: package `salt` update to version 0.17.2-alt1