Поиск уязвимостей
Количество 6
Количество 6
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. The LocalClient.cmd_batch() method client does not accept external_auth credentials and so access to it from salt-api has been removed for now. This vulnerability allows code execution for already-authenticated users and is only in effect when running salt-api as the root user.
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt befo ...
GHSA-f2h7-4f84-8qrm
SaltStack Salt Authentication Bypass when using the local_batch client from salt-api
ALT-PU-2017-1403
ALT-PU-2017-1403: package `salt` update to version 2016.11.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-5192 When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. The LocalClient.cmd_batch() method client does not accept external_auth credentials and so access to it from salt-api has been removed for now. This vulnerability allows code execution for already-authenticated users and is only in effect when running salt-api as the root user. | CVSS3: 8.8 | 2% Низкий | около 9 лет назад |
 | CVE-2017-5192 When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. | CVSS3: 7.5 | 2% Низкий | почти 10 лет назад |
 | CVE-2017-5192 When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. | CVSS3: 8.8 | 2% Низкий | около 9 лет назад |
| CVE-2017-5192 When using the local_batch client from salt-api in SaltStack Salt befo ... | CVSS3: 8.8 | 2% Низкий | около 9 лет назад |
| GHSA-f2h7-4f84-8qrm SaltStack Salt Authentication Bypass when using the local_batch client from salt-api | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2017-1403 ALT-PU-2017-1403: package `salt` update to version 2016.11.3-alt1 | CVSS3: 9.8 | больше 9 лет назад |
Уязвимостей на страницу