Salt allows deleted minions to read or write to minions with the same id
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-9639US | critical9.1 | — | ||
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2016/11/25/2WEB
- http://www.openwall.com/lists/oss-security/2016/11/25/3WEB
- https://docs.saltproject.io/en/latest/topics/releases/2015.8.11.html#new-master-configuration-parameterWEB
- https://docs.saltstack.com/en/2015.8/ref/configuration/master.html#rotate-aes-keyWEB
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-34.yamlWEB
- https://github.com/saltstack/saltPACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2016-9639ADVISORY
- https://web.archive.org/web/20200227212146/http://www.securityfocus.com/bid/94553WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan