PT-2016-4907

CVE-2016-1866

·

Published

2016-04-12

·

Updated

2022-05-14

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Salt versions 2015.8.x before 2015.8.4
Description The issue allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream due to improper handling of clear messages on the minion.
Recommendations For Salt versions 2015.8.x before 2015.8.4, update to version 2015.8.4 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2016-1866
GHSA-VQH4-CRJF-JJXX
OPENSUSE-SU-2024:10291-1
PYSEC-2016-23
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com