Поиск уязвимостей
Количество 19
Количество 19
ALT-PU-2017-1403
ALT-PU-2017-1403: package `salt` update to version 2016.11.3-alt1
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. The LocalClient.cmd_batch() method client does not accept external_auth credentials and so access to it from salt-api has been removed for now. This vulnerability allows code execution for already-authenticated users and is only in effect when running salt-api as the root user.
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt befo ...
GHSA-f2h7-4f84-8qrm
SaltStack Salt Authentication Bypass when using the local_batch client from salt-api
CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impers ...
CVE-2017-5200
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client. Users of Salt-API and salt-ssh could execute a command on the salt master via a hole when both systems were enabled.
CVE-2017-5200
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
CVE-2017-5200
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
CVE-2017-5200
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, ...
GHSA-g283-88v5-rmq2
SaltStack Salt allows compromised salt-minions to impersonate the salt-master
GHSA-8r7r-x48r-pf8f
SaltStack Salt arbitrary command execution in Salt-api via ssh_client
SUSE-SU-2017:1582-1
Security update for Salt
SUSE-SU-2017:1581-1
Security update for Salt
openSUSE-SU-2018:1053-1
Security update for salt
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2017-1403 ALT-PU-2017-1403: package `salt` update to version 2016.11.3-alt1 | CVSS3: 9.8 | больше 9 лет назад | |
 | CVE-2017-5192 When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. The LocalClient.cmd_batch() method client does not accept external_auth credentials and so access to it from salt-api has been removed for now. This vulnerability allows code execution for already-authenticated users and is only in effect when running salt-api as the root user. | CVSS3: 8.8 | 2% Низкий | около 9 лет назад |
 | CVE-2017-5192 When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. | CVSS3: 7.5 | 2% Низкий | почти 10 лет назад |
 | CVE-2017-5192 When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. | CVSS3: 8.8 | 2% Низкий | около 9 лет назад |
| CVE-2017-5192 When using the local_batch client from salt-api in SaltStack Salt befo ... | CVSS3: 8.8 | 2% Низкий | около 9 лет назад |
| GHSA-f2h7-4f84-8qrm SaltStack Salt Authentication Bypass when using the local_batch client from salt-api | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
| CVE-2017-7893 In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master. | CVSS3: 9.8 | 1% Низкий | больше 8 лет назад |
| CVE-2017-7893 In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master. | CVSS3: 7.6 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7893 In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master. | CVSS3: 9.8 | 1% Низкий | больше 8 лет назад |
| CVE-2017-7893 In SaltStack Salt before 2016.3.6, compromised salt-minions can impers ... | CVSS3: 9.8 | 1% Низкий | больше 8 лет назад |
| CVE-2017-5200 Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client. Users of Salt-API and salt-ssh could execute a command on the salt master via a hole when both systems were enabled. | CVSS3: 8.8 | 3% Низкий | около 9 лет назад |
| CVE-2017-5200 Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client. | CVSS3: 7.5 | 3% Низкий | почти 10 лет назад |
| CVE-2017-5200 Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client. | CVSS3: 8.8 | 3% Низкий | около 9 лет назад |
| CVE-2017-5200 Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, ... | CVSS3: 8.8 | 3% Низкий | около 9 лет назад |
| GHSA-g283-88v5-rmq2 SaltStack Salt allows compromised salt-minions to impersonate the salt-master | CVSS3: 9.8 | 1% Низкий | больше 4 лет назад |
| GHSA-8r7r-x48r-pf8f SaltStack Salt arbitrary command execution in Salt-api via ssh_client | CVSS3: 8.8 | 3% Низкий | больше 4 лет назад |
 | SUSE-SU-2017:1582-1 Security update for Salt | больше 9 лет назад | ||
| SUSE-SU-2017:1581-1 Security update for Salt | больше 9 лет назад | ||
| openSUSE-SU-2018:1053-1 Security update for salt | больше 8 лет назад |
Уязвимостей на страницу