CVE-2017-7893

8 documents6 sources
Severity
9.8CRITICAL
EPSS
0.5%
top 35.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Saltstack Salt
Timeline
PublishedApr 23
Latest updateMay 13

Description

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDsaltstack/salt< 2016.3.6
▶PyPIsalt< 2016.3.6

🔴Vulnerability Details

4
OSV
SaltStack Salt allows compromised salt-minions to impersonate the salt-master↗2022-05-13
▶
GHSA
SaltStack Salt allows compromised salt-minions to impersonate the salt-master↗2022-05-13
▶
CVEList
CVE-2017-7893: In SaltStack Salt before 2016↗2018-04-23
▶
OSV
CVE-2017-7893: In SaltStack Salt before 2016↗2018-04-23
▶

📋Vendor Advisories

1
Red Hat
salt: Compromised salt-minions can impersonate the salt-master↗2017-03-22
▶

💬Community

2
Bugzilla
CVE-2017-7893 salt: Compromised salt-minions can impersonate the salt-master [epel-all]↗2018-04-26
▶
Bugzilla
CVE-2017-7893 salt: Compromised salt-minions can impersonate the salt-master↗2018-04-26
▶
CVE-2017-7893 (CRITICAL CVSS 9.8) | In SaltStack Salt before 2016.3.6 | cvebase.io