Most recent entries from all

cnvd-2017-34862

EUVD-2026-73166

fkie_cve-2017-5200

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.

GHSA-8r7r-x48r-pf8f — SaltStack Salt arbitrary command execution in Salt-api via ssh_client

Affected: PyPI: salt

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.

gsd-2017-5200

PYSEC-2017-39

Affected: PyPI: salt

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.

SUSE-SU-2017:1581-1 — Security update for Salt

Security update for Salt

UBUNTU-CVE-2017-5200

Affected: Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: salt

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client. Users of Salt-API and salt-ssh could execute a command on the salt master via a hole when both systems were enabled.