| Package | Affected versions | Patched versions |
|---|---|---|
| salt | ≥ 2015.8.11, < 2015.8.13≥ 2016.11.0, < 2016.11.10≥ 2016.11.0, < 2016.11.3≥ 2016.11.4, < 2016.11.6≥ 2016.11.7, < 2016.11.10≥ 2016.3.0, < 2016.3.4≥ 2016.3.0, < 2016.3.8≥ 2016.3.5, < 2016.3.6≥ 2016.3.7, < 2016.3.8≥ 2017.5.0, < 2017.7.8≥ 2017.7.0, < 2017.7.4≥ 2017.7.5, < 2017.7.8≥ 2018.2.0, < 2018.3.5≥ 2018.3.0rc1, < 2018.3.5≥ 2019.2.0, < 2019.2.5≥ 2019.2.0, < 2019.2.7≥ 3000, < 3000.3≥ 3000.0, < 3000.5≥ 3001.0, < 3001.3≥ 3002.0, < 3002.1< 2015.8.10< 2015.8.13 | 2015.8.132016.11.102016.11.32016.11.62016.3.42016.3.82016.3.62017.7.82017.7.42018.3.52019.2.52019.2.73000.33000.53001.33002.12015.8.10 |
| salt | = 3001≥ 2015.8.11, < 2015.8.13≥ 2016.11.0, < 2016.11.3≥ 2016.11.4, < 2016.11.6≥ 2016.11.7, < 2016.11.10≥ 2016.3.0, < 2016.3.4≥ 2016.3.5, < 2016.3.6≥ 2016.3.7, < 2016.3.8≥ 2017.5.0, < 2017.7.4≥ 2017.7.5, < 2017.7.8≥ 2018.2.0, < 2018.3.5≥ 2019.2.0, < 2019.2.5≥ 3000.0, < 3000.3< 2015.8.10 | 2015.8.132016.11.32016.11.62016.11.102016.3.42016.3.62016.3.82017.7.42017.7.82018.3.52019.2.53000.32015.8.10 |
In SaltStack the salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free