Lucene search

K
osvGoogleOSV:GHSA-VQH4-CRJF-JJXX
HistoryMay 14, 2022 - 2:11 a.m.

Salt Improper Access Control

2022-05-1402:11:54
Google
osv.dev
5
salt
improper access control
2015.8.x
arbitrary code
data stream
man-in-the-middle

EPSS

0.002

Percentile

52.5%

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.

EPSS

0.002

Percentile

52.5%