Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-6617
HistoryNov 05, 2013 - 12:00 a.m.

CVE-2013-6617

2013-11-0500:00:00
ubuntu.com
ubuntu.com
8

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.006

Percentile

79.5%

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not
properly drop group privileges, which makes it easier for remote attackers
to gain privileges.

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.006

Percentile

79.5%