Описание
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.17.5+ds-1 |
| esm-infra-legacy/trusty | not-affected | 0.17.5+ds-1 |
| lucid | DNE | |
| precise | DNE | |
| quantal | ignored | end of life |
| raring | ignored | end of life |
| saucy | ignored | end of life |
| trusty | not-affected | 0.17.5+ds-1 |
| trusty/esm | not-affected | 0.17.5+ds-1 |
| upstream | released | 0.17.1 |
Показывать по
10
EPSS
Процентиль: 55%
0.00324
Низкий
6 Medium
CVSS2
Связанные уязвимости
nvd
больше 12 лет назад
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
debian
больше 12 лет назад
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated ...
CVSS3: 8.8
github
больше 3 лет назад
Salt has insufficient argument validation in several modules
EPSS
Процентиль: 55%
0.00324
Низкий
6 Medium
CVSS2