Lucene search
Veracode Vulnerability DatabaseVERACODE:4937HistoryAug 22, 2017 - 8:22 a.m.
Directory Traversal
2017-08-2208:22:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
EPSS
0.005
Percentile
77.3%
salt is vulnerable to directory traversal attacks. The attack is possible because minion ids are not properly checked, allowing a malicious user to pass a minion id containing escape characters to traverse the filesystem.
Related
nessus
nessus
SUSE SLES11 Security Update : salt (SUSE-SU-2017:2666-1)
2017-10-11 00:00:00
FreeBSD : salt -- Maliciously crafted minion IDs can cause unwanted directory traversals on the Salt-master (3531141d-a708-477c-954a-2a0549e49ca9)
2017-08-23 00:00:00
openSUSE Security Update : salt (openSUSE-2017-1016)
2017-09-13 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:2666-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-4769-1)
2023-01-27 00:00:00
cve
cve
CVE-2017-12791
2017-08-23 14:29:00
CVE-2017-14695
2017-10-24 17:29:00
cvelist
cvelist
CVE-2017-12791
2017-08-23 14:00:00
CVE-2017-14695
2017-10-24 17:00:00
osv
osv
SaltStack Salt Directory traversal vulnerability in minion id validation
2022-05-17 01:22:50
PYSEC-2017-35
2017-08-23 14:29:00
CVE-2017-12791
2017-08-23 14:29:00
github
github
SaltStack Salt Directory traversal vulnerability in minion id validation
2022-05-17 01:22:50
SaltStack Salt Directory traversal vulnerability in minion id validation
2022-05-17 00:24:32
ubuntucve
ubuntucve
CVE-2017-12791
2017-08-23 00:00:00
CVE-2017-14695
2017-10-24 00:00:00
debiancve
debiancve
CVE-2017-12791
2017-08-23 14:29:00
CVE-2017-14695
2017-10-24 17:29:00
prion
prion
Directory traversal
2017-08-23 14:29:00
Directory traversal
2017-10-24 17:29:00
redhatcve
redhatcve
CVE-2017-12791
2017-08-16 09:48:52
CVE-2017-14695
2017-10-19 12:25:28
archlinux
archlinux
[ASA-201708-17] salt: directory traversal
2017-08-23 00:00:00
freebsd
freebsd
salt -- Maliciously crafted minion IDs can cause unwanted directory traversals on the Salt-master
2017-08-16 00:00:00
salt -- multiple vulnerabilities
2017-10-09 00:00:00
nvd
nvd
CVE-2017-12791
2017-08-23 14:29:00
CVE-2017-14695
2017-10-24 17:29:00
veracode
veracode
Directory Traversal
2017-10-25 02:27:30
photon
photon
ubuntu
ubuntu
Salt vulnerabilities
2021-03-15 00:00:00