SaltStack Salt CVE-2017-12791 Directory Traversal Vulnerability

Bugtraq ID:	100384
Class:	Input Validation Error
CVE:	CVE-2017-12791
Remote:	Yes
Local:	No
Published:	Aug 15 2017 12:00AM
Updated:	Aug 15 2017 12:00AM
Credit:	[email protected]
Vulnerable:	SaltStack Salt 2017.7 SaltStack Salt 2016.11.6 SaltStack Salt 2016.11.5 SaltStack Salt 2016.11.3 SaltStack Salt 2016.11.2 SaltStack Salt 2016.3.6 SaltStack Salt 2016.3.5 SaltStack Salt 2016.3.3 SaltStack Salt 2016.11.4
Not Vulnerable:	SaltStack Salt 2017.7.1 SaltStack Salt 2016.11.7 SaltStack Salt 2016.3.7

SaltStack Salt CVE-2017-12791 Directory Traversal Vulnerability

SaltStack Salt is prone to a directory-traversal vulnerability.

Remote attackers may use a specially crafted request with directory-traversal sequences ('../') to retrieve sensitive information. This may aid in further attacks.

SaltStack Salt 2016.11.6 is vulnerable; other versions may also be affected.

SaltStack Salt CVE-2017-12791 Directory Traversal Vulnerability

An attacker can exploit this issue using a web browser.

SaltStack Salt CVE-2017-12791 Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SaltStack Salt CVE-2017-12791 Directory Traversal Vulnerability

References:

• [2016.11] Add clean_id function to salt.utils.verify.py #42944 (SaltStack)
  
• Bug 1482006 - (CVE-2017-12791) CVE-2017-12791 salt: Directory traversal vulnerab (Red Hat)
  
• CVE-2017-12791 (Red Hat)
  
• Debian Bug report logs - #872399 salt: CVE-2017-12791: Directory traversal vulne (Debian)
  
• SaltStack Homepage (SaltStack)
  
• SALT 2016.11.7 RELEASE NOTES (SaltStack)