PyPI/salt CVE-2013-4439: unknown, EPSS 1.49%

Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.

Action: Upgrade salt to 0.17.1 or later.

pip install salt==0.17.1

Affected

Fixed versions

Sources

• osv: PYSEC-2013-14
• http://www.openwall.com/lists/oss-security/2013/10/18/3
• http://docs.saltstack.com/topics/releases/0.17.1.html
• https://github.com/saltstack/salt/pull/7356
• https://github.com/advisories/GHSA-jmv9-5gx8-7xpf

CVE-2013-4439 · published 2013-11-05T18:55:00Z · modified 2023-11-08T03:57:23.276056Z · JSON