{"action":"Upgrade salt to 2016.3.6 or later.","affected":[{"fixed":"2016.3.6","introduced":"0"}],"component":"salt","cve_ids":["CVE-2017-7893"],"ecosystem":"PyPI","epss":0.01385,"exploited":false,"fixed_versions":["2016.3.6"],"ghsa_id":"GHSA-g283-88v5-rmq2","id":"tcs_01M5KG816T8AX5VHHKFNW88QN7","modified_at":"2026-06-10T17:02:37.925591673Z","published_at":"2018-04-23T22:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-50","https://docs.saltstack.com/en/2017.7/topics/releases/2016.3.6.html","https://github.com/advisories/GHSA-g283-88v5-rmq2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-50","url":"https://osv.dev/vulnerability/PYSEC-2018-50"}],"summary":"In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master."}