SaltStack Salt Security Bypass Vulnerability
BID:62995
Info
SaltStack Salt Security Bypass Vulnerability
| Bugtraq ID: | 62995 |
| Class: | Unknown |
| CVE: |
CVE-2013-4439 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 14 2013 12:00AM |
| Updated: | May 07 2015 05:11PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
SaltStack Salt 0.15.1 SaltStack Salt 0.15 SaltStack Salt 0.14 SaltStack Salt 0.13 SaltStack Salt 0.12 SaltStack Salt 0.11 SaltStack Salt 0.10.5 SaltStack Salt 0.10.2 SaltStack Salt 0.10 SaltStack Salt 0.9.2 SaltStack Salt 0.9 SaltStack Salt 0.8.9 |
| Not Vulnerable: | |
Discussion
SaltStack Salt Security Bypass Vulnerability
Salt is prone to a security-bypass vulnerability.
Exploiting this issue could allow an attacker to bypass certain security restrictions.
Salt is prone to a security-bypass vulnerability.
Exploiting this issue could allow an attacker to bypass certain security restrictions.
Exploit / POC
SaltStack Salt Security Bypass Vulnerability
An attacker can exploit these issues using readily available tools.
An attacker can exploit these issues using readily available tools.
Solution / Fix
SaltStack Salt Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
SaltStack Salt Security Bypass Vulnerability
References:
References: