Vulnerabilities > CVE-2013-2228 - Improper Restriction of Excessive Authentication Attempts vulnerability in Saltstack 0.14.0/0.14.1/0.15.0
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
SaltStack RSA Key Generation allows remote users to decrypt communications
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |
Common Weakness Enumeration (CWE)
References
- https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-2228
- https://security-tracker.debian.org/tracker/CVE-2013-2228
- http://www.openwall.com/lists/oss-security/2013/07/01/1
- http://www.securitytracker.com/id/1028717
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2228
- http://www.securityfocus.com/bid/60868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85372