SaltStack Salt SSL Certificate Validation Multiple Security Bypass Vulnerabilities
BID:74447
Info
SaltStack Salt SSL Certificate Validation Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 74447 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 02 2015 12:00AM |
| Updated: | May 02 2015 12:00AM |
| Credit: | Michael Scherer |
| Vulnerable: |
SaltStack Salt 0 |
| Not Vulnerable: | |
Discussion
SaltStack Salt SSL Certificate Validation Multiple Security Bypass Vulnerabilities
SaltStack Salt is prone to multiple security-bypass vulnerabilities.
Attackers can exploit these issues through man-in-the-middle attacks to gain access to sensitive information, which may lead to further attacks.
SaltStack Salt is prone to multiple security-bypass vulnerabilities.
Attackers can exploit these issues through man-in-the-middle attacks to gain access to sensitive information, which may lead to further attacks.
Exploit / POC
SaltStack Salt SSL Certificate Validation Multiple Security Bypass Vulnerabilities
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
SaltStack Salt SSL Certificate Validation Multiple Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
SaltStack Salt SSL Certificate Validation Multiple Security Bypass Vulnerabilities
References:
References:
- CVE Request / Saltstack SSL verification disabling for alibabab cloud module (Michael Scherer)
- SaltStack Homepage (SaltStack)