Salt has insufficient argument validation in several modules
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-4435US | medium6.0 | — | ||
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the rou… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://docs.saltstack.com/topics/releases/0.17.1.htmlWEB
- http://www.openwall.com/lists/oss-security/2013/10/18/3WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2013-12.yamlWEB
- https://github.com/saltstack/saltPACKAGE
- https://github.com/saltstack/salt/blob/master/doc/topics/releases/0.17.1.rstWEB
- https://nvd.nist.gov/vuln/detail/CVE-2013-4435ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan