CVE-2016-9639

Опубликовано: 07 фев. 2017

Источник: nvd

CVSS3: 9.1

CVSS2: 7.5

EPSS Низкий

Описание

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

Ссылки

http://www.openwall.com/lists/oss-security/2016/11/25/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/11/25/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94553
Third Party Advisory
VDB Entry
https://docs.saltstack.com/en/2015.8/ref/configuration/master.html#rotate-aes-key
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/11/25/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/11/25/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94553
Third Party Advisory
VDB Entry
https://docs.saltstack.com/en/2015.8/ref/configuration/master.html#rotate-aes-key
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*

Версия до 2015.8.10 (включая)

EPSS

Процентиль: 84%

0.02602

Низкий

9.1 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVE-2016-9639

CVSS3: 9.1

ubuntu

больше 9 лет назад

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

CVE-2016-9639

CVSS3: 5.3

redhat

больше 9 лет назад

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

CVE-2016-9639

CVSS3: 9.1

debian

больше 9 лет назад

Salt before 2015.8.11 allows deleted minions to read or write to minio ...

SUSE-RU-2017:0174-1

suse-cvrf

больше 9 лет назад

Recommended update for SUSE Manager Client Tools

SUSE-RU-2017:0169-1

suse-cvrf

больше 9 лет назад

Recommended update for Salt

EPSS

Процентиль: 84%

0.02602

Низкий

9.1 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-284