CVE-2013-2228
published 2019-12-03CVE-2013-2228: SaltStack RSA Key Generation allows remote users to decrypt communications
PriorityP344high8.1CVSS 3.1
AVNACHPRNUINSUCHIHAH
EPSS
1.94%
77.7th percentile
SaltStack RSA Key Generation allows remote users to decrypt communications
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| saltstack | salt | >= 0 < 0.15.1 | 0.15.1 |
| saltstack | saltstack | — | — |
| saltstack | saltstack | 0.14.0 – 0.15.0 | — |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
SaltStack RSA Key Generation allows remote users to decrypt communications
osv·2022-05-05
CVE-2013-2228 [HIGH] SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications
GHSA
SaltStack RSA Key Generation allows remote users to decrypt communications
ghsa·2022-05-05
CVE-2013-2228 [HIGH] CWE-307 SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.openwall.com/lists/oss-security/2013/07/01/1http://www.securityfocus.com/bid/60868http://www.securitytracker.com/id/1028717https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-2228https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2228https://exchange.xforce.ibmcloud.com/vulnerabilities/85372https://security-tracker.debian.org/tracker/CVE-2013-2228http://www.openwall.com/lists/oss-security/2013/07/01/1http://www.securityfocus.com/bid/60868http://www.securitytracker.com/id/1028717https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-2228https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2228https://exchange.xforce.ibmcloud.com/vulnerabilities/85372https://security-tracker.debian.org/tracker/CVE-2013-2228
2019-12-03
Published