{"action":"Upgrade salt to 0.17.1 or later.","affected":[{"fixed":"0.17.1","introduced":"0"}],"component":"salt","cve_ids":["CVE-2013-4439"],"ecosystem":"PyPI","epss":0.01486,"exploited":false,"fixed_versions":["0.17.1"],"ghsa_id":"GHSA-jmv9-5gx8-7xpf","id":"tcs_01M5KG5R3CBRJ2FQ6FY8HK2DWY","modified_at":"2023-11-08T03:57:23.276056Z","published_at":"2013-11-05T18:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2013-14","http://www.openwall.com/lists/oss-security/2013/10/18/3","http://docs.saltstack.com/topics/releases/0.17.1.html","https://github.com/saltstack/salt/pull/7356","https://github.com/advisories/GHSA-jmv9-5gx8-7xpf"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2013-14","url":"https://osv.dev/vulnerability/PYSEC-2013-14"}],"summary":"Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key."}