Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2020-17490

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.

VectorLOCAL

PublishedNov 06, 2020, 08:15

Published Bycve@mitre.org

Base Score

Score5.5

Package (Ecosystem)IntroducedFixedLimit

salt(PyPI)02015.8.13N/A

salt(PyPI)2016.3.02016.3.8N/A

salt(PyPI)2016.11.02016.11.10N/A

salt(PyPI)2017.5.02017.7.8N/A

salt(PyPI)2018.2.02018.3.5N/A

salt(PyPI)2019.2.02019.2.6N/A

salt(PyPI)30003000.4N/A

salt(PyPI)30013001.2N/A

salt(PyPI)30023002.1N/A

CWE-732

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL