The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients).
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| salt(PyPI) | 2016.11 | 2016.11.4 | N/A |
CVSS Metrics
