CVE-2013-4439

SaltStack Salt 0.15.0-0.17.0 - Authenticated Minion Impersonation

Title source: llm
STIX 2.1

Description

Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.

References (3)

Core 3
Core References
Issue Tracking x_refsource_confirm
https://github.com/saltstack/salt/pull/7356
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/10/18/3
Patch, Vendor Advisory x_refsource_confirm
http://docs.saltstack.com/topics/releases/0.17.1.html

Scores

EPSS 0.0149
EPSS Percentile 71.3%

Details

CWE
CWE-264
Status published
Products (8)
pypi/salt 0.15.0 - 0.17.1PyPI
saltstack/salt 0.15.0
saltstack/salt 0.15.1
saltstack/salt 0.16.0
saltstack/salt 0.16.2
saltstack/salt 0.16.3
saltstack/salt 0.16.4
saltstack/salt 0.17.0
Published Nov 05, 2013
Tracked Since Feb 18, 2026