Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-1866

Опубликовано: 12 апр. 2016
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.1

Описание

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.

РелизСтатусПримечание
artful

not-affected

bionic

not-affected

cosmic

not-affected

devel

DNE

disco

not-affected

esm-apps/bionic

not-affected

esm-apps/jammy

not-affected

esm-apps/xenial

not-affected

2015.8.8+ds-1
esm-infra-legacy/trusty

needed

esm-infra/focal

DNE

Показывать по

EPSS

Процентиль: 70%
0.00628
Низкий

6.8 Medium

CVSS2

8.1 High

CVSS3

Связанные уязвимости

redhat
около 10 лет назад

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.

CVSS3: 8.1
nvd
почти 10 лет назад

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.

CVSS3: 8.1
debian
почти 10 лет назад

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages ...

suse-cvrf
почти 10 лет назад

Security update for salt

CVSS3: 8.1
github
больше 3 лет назад

Salt Improper Access Control

EPSS

Процентиль: 70%
0.00628
Низкий

6.8 Medium

CVSS2

8.1 High

CVSS3