Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-5192
6.5
MEDIUMCVSS v2
Published
September 26, 2017
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
saltstack/salt
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.= 2016.11.2, = 2016.11.1, = 2016.11.0, = 2016.3.0, = 2016.3.1, = 2016.3.2, = 2016.3.3, = 2016.3.4, <= 2015.8.12NVD
twangboy/saltGitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here:
GitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here: = 2016.11.2, = 2016.11.1, = 2016.11.0, = 2016.3.0, = 2016.3.1, = 2016.3.2, = 2016.3.3, = 2016.3.4, <= 2015.8.12NVD
Crates.io
RubyGems
NPM