Описание
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.
A flaw was found in salt. Webutils write passwords in cleartext to /var/log/salt/minion.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ceph Storage 2 | salt | Out of support scope |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-312
https://bugzilla.redhat.com/show_bug.cgi?id=1933339salt: webutils write passwords in cleartext to /var/log/salt/minion
EPSS
Процентиль: 44%
0.00543
Низкий
4.1 Medium
CVSS3
Связанные уязвимости
CVSS3: 4.4
ubuntu
больше 5 лет назад
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.
CVSS3: 4.4
nvd
больше 5 лет назад
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.
CVSS3: 4.4
debian
больше 5 лет назад
An issue was discovered in through SaltStack Salt before 3002.5. salt. ...
CVSS3: 4.4
github
больше 4 лет назад
SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod
EPSS
Процентиль: 44%
0.00543
Низкий
4.1 Medium
CVSS3