CVE-2015-4017

Опубликовано: 25 авг. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.

Ссылки

http://www.openwall.com/lists/oss-security/2015/05/19/2
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1222960
Issue Tracking
Patch
Third Party Advisory
https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.html
Patch
Release Notes
Vendor Advisory
https://groups.google.com/forum/#%21topic/salt-users/8Kv1bytGD6c
http://www.openwall.com/lists/oss-security/2015/05/19/2
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1222960
Issue Tracking
Patch
Third Party Advisory
https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.html
Patch
Release Notes
Vendor Advisory
https://groups.google.com/forum/#%21topic/salt-users/8Kv1bytGD6c

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:saltstack:salt:2014.7.5:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00311

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

CVE-2015-4017

CVSS3: 7.5

ubuntu

больше 8 лет назад

Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.

CVE-2015-4017

redhat

почти 11 лет назад

Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.

CVE-2015-4017

CVSS3: 7.5

debian

больше 8 лет назад

Salt before 2014.7.6 does not verify certificates when connecting via ...

GHSA-8j9g-c9rp-jvg4

CVSS3: 7.5

github

больше 3 лет назад

Salt vulnerable to Improper Certificate Validation

EPSS

Процентиль: 54%

0.00311

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-295