CVE-2017-8109

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might…

published April 25, 2017

CVSS
—
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.4th percentile
Published
2017-04-25T17:00Z
EPSS history
Timeline
  • 25 APR 17:00Z
    The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might…
    cvelistv5