Lucene search

Veracode Vulnerability DatabaseVERACODE:7645

HistoryOct 25, 2018 - 5:21 a.m.

Remote Code Execution (RCE)

2018-10-2505:21:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.029 Low

EPSS

Percentile

90.9%

JSON

salt is vulnerable to remote code execution (RCE) attacks. The vulnerability exists due to the improper processing of spaces in the file path which may allow RCE attacks.

CPENameOperatorVersion
saltle2017.7.7
saltle2018.3.2

CPE	Name	Operator	Version
	salt	le	2017.7.7
	salt	le	2018.3.2

References

lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html

docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html

docs.saltstack.com/en/latest/topics/releases/2018.3.3.html

github.com/saltstack/salt/commit/8d1fc4f8e53af496b52b31341d67b4bd22567cba

github.com/saltstack/salt/pull/48866

groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ

groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ

lists.debian.org/debian-lts-announce/2020/07/msg00024.html

0.029 Low

EPSS

Percentile

90.9%

JSON

Related for VERACODE:7645