Alpine/salt: critical 9.8
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
Action: Upgrade salt to 2018.3.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2018.3.0 | 2018.3.3-r0 | - |
Fixed versions
| 2018.3.3-r0 |
Sources
published · modified · JSON