Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-14695
7.5
HIGHCVSS v2
Published
October 24, 2017
Affected
8 projects
Assigned by
MITRE
Severity scale
010
Description
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
saltstack/salt
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.= 2016.11.2, = 2016.11.1, = 2016.11.0, = 2016.11, = 2016.11.3, = 2017.7.0, = 2017.7.1, = 2016.11.7, <= 2016.3.7, = 2016.11.6, = 2016.11.5, = 2016.11.4NVD
twangboy/saltGitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here:
GitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here: = 2016.11.2, = 2016.11.1, = 2016.11.0, = 2016.11, = 2016.11.3, = 2017.7.0, = 2017.7.1, = 2016.11.7, <= 2016.3.7, = 2016.11.6, = 2016.11.5, = 2016.11.4NVD
Crates.io
RubyGems
NPM