GHSA-f22j-37jj-cxw9

ghsaUSosv

SaltStack MITM SSH attack in salt-ssh

view advisory published 2022-05-17Licence: CC-BY-4.0

The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2013-4436US	high9.3	1.82% (79th)	—	2013-11-05
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a…

references

External citations — patches, advisories, analysis.

http://docs.saltstack.com/topics/releases/0.17.1.htmlWEB
http://www.openwall.com/lists/oss-security/2013/10/18/3WEB
https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2013-26.yamlWEB
https://github.com/saltstack/saltPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2013-4436ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan