PyPI/salt CVE-2017-7893: unknown, EPSS 1.39%

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

Action: Upgrade salt to 2016.3.6 or later.

pip install salt==2016.3.6

Affected

Fixed versions

Sources

• osv: PYSEC-2018-50
• https://docs.saltstack.com/en/2017.7/topics/releases/2016.3.6.html
• https://github.com/advisories/GHSA-g283-88v5-rmq2

CVE-2017-7893 · published 2018-04-23T22:29:00Z · modified 2026-06-10T17:02:37.925591673Z · JSON