| Package | Affected versions | Patched versions |
|---|---|---|
| salt | ≥ 2016.11.0, < 2016.11.10≥ 2017.7.0, < 2017.7.8≥ 2018.3.0, < 2018.3.3< 2017.7.8 | 2016.11.102017.7.82018.3.3 |
| salt | ≥ 2018.3.0, < 2018.3.3< 2017.7.8 | 2018.3.32017.7.8 |
SaltStack Salt 2016.11.x before 2016.11.10, 2017.7.x before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free