PyPI/salt CVE-2020-17490: medium 5.5, EPSS 0.42%

SaltStack Salt Allows creating certificates with weak file permissions

Action: Upgrade salt to 2015.8.13 or later.

pip install salt==2015.8.13

pip install salt==2016.3.8

pip install salt==2016.11.10

pip install salt==2017.7.8

pip install salt==2018.3.5

pip install salt==2019.2.6

pip install salt==3000.4

pip install salt==3001.2

pip install salt==3002.1

Affected

2015.8.13

2016.3.8

2016.11.10

2017.7.8

2018.3.5

2019.2.6

3000.4

3001.2

3002.1

CVE-2020-17490 · published 2022-05-24T17:33:17Z · modified 2024-10-22T15:01:10.323086Z · JSON