Vulnerability in Saltstack Salt
CVE-2019-1010259
SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL…
EPSS: 0.004 (58.7th percentile) — read the EPSS interpretation.
Affected products
- Saltstack Salt — versions 2018.3, 2019.2 [fixed: 2018.3.4]
References
- github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/mo… (x_refsource_MISC)
- github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a (x_refsource_MISC)
- github.com/saltstack/salt/pull/51462 (x_refsource_MISC)