Vulnerabilities > Saltstack
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2013-11-05 | CVE-2013-4439 | Permissions, Privileges, and Access Controls vulnerability in Saltstack Salt Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key. | 4.9 |
| 2013-11-05 | CVE-2013-4438 | Code Injection vulnerability in Saltstack Salt Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. | 7.5 |
| 2013-11-05 | CVE-2013-4437 | Insecure Temporary File Handling vulnerability in Saltstack Salt 0.17.0 Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp." | 10.0 |
| 2013-11-05 | CVE-2013-4436 | Improper Input Validation vulnerability in Saltstack Salt 0.17.0 The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack. | 9.3 |
| 2013-11-05 | CVE-2013-4435 | Improper Authentication vulnerability in Saltstack Salt Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine. | 6.0 |