Lucene search

K
redhatcveRedhat.comRH:CVE-2017-8109
HistoryApr 26, 2017 - 9:18 a.m.

CVE-2017-8109

2017-04-2609:18:18
redhat.com
access.redhat.com
12

EPSS

0

Percentile

5.1%

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients).