tocsin

CVE-2017-14695

2 advisories.

PyPI/salt CVE-2017-14695: critical 9.8

SaltStack Salt Directory traversal vulnerability in minion id validation

Action: Upgrade salt to 2016.3.8 or later.

pip install salt==2016.3.8
pip install salt==2016.11.8
pip install salt==2017.7.2

Affected

introducedfixedlast affected
02016.3.8-
2016.11.02016.11.8-
2017.7.02017.7.2-

Fixed versions

2016.3.82016.11.82017.7.2

Sources

CVE-2017-14695 · published · modified · JSON

PyPI/salt CVE-2017-14695: unknown

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials t

Action: Upgrade salt to 2016.3.8 or later.

pip install salt==2016.3.8
pip install salt==2016.11.8
pip install salt==2017.7.2

Affected

introducedfixedlast affected
02016.3.8-
2016.112016.11.8-
2017.72017.7.2-

Fixed versions

2016.3.82016.11.82017.7.2

Sources

CVE-2017-14695 · published · modified · JSON