Auth bypass in Saltstack Salt
CVE-2013-4435
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.0 (Medium). Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.015 (73.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 73rd percentile — 73.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.015 · newest: 0.015 · change: 0.000
Affected products
- Saltstack Salt — versions 0.15.0, 0.15.1, 0.16.0
Weakness classification (CWE)
References
- www.openwall.com/lists/oss-security/2013/10/18/3 (mailing-list)
- docs.saltstack.com/topics/releases/0.17.1.html (Patch, Vendor Advisory)