CVE-2013-4435
published 2013-11-05CVE-2013-4435: Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines…
PriorityP433medium6CVSS 2.0
AVNACMAuSCPIPAP
EPSS
1.52%
71.3th percentile
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| saltstack | salt | — | — |
| saltstack | salt | — | — |
| saltstack | salt | — | — |
| saltstack | salt | — | — |
| saltstack | salt | — | — |
| saltstack | salt | — | — |
| saltstack | salt | — | — |
| saltstack | salt | >= 0.15.0 < 0.17.1 | 0.17.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Salt has insufficient argument validation in several modules
ghsa·2022-05-17
CVE-2013-4435 [HIGH] CWE-287 Salt has insufficient argument validation in several modules
Salt has insufficient argument validation in several modules
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
OSV
Salt has insufficient argument validation in several modules
osv·2022-05-17
CVE-2013-4435 [HIGH] Salt has insufficient argument validation in several modules
Salt has insufficient argument validation in several modules
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
OSV
CVE-2013-4435: Salt (aka SaltStack) 0
osv·2013-11-05
CVE-2013-4435 CVE-2013-4435: Salt (aka SaltStack) 0
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
No detection rules found.
No public exploits indexed.
2013-11-05
Published