When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| salt(PyPI) | 0 | 2015.8.13 | N/A |
| salt(PyPI) | 2016.3.0 | 2016.3.5 | N/A |
| salt(PyPI) | 2016.11.0 | 2016.11.2 | N/A |
CVSS Metrics
