Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2013-6617

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.

PublishedNov 05, 2013, 18:55

Published Bycve@mitre.org

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

salt(PyPI)0.11.00.17.1N/A

References

http://docs.saltstack.com/topics/releases/0.17.1.html

Weakness Type

CWE-264

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:N/C:C/I:C/A:C

Base SeverityUnknown

Version

2.0

Attack Vector (AV)