CVE-2013-4436

CVE-2013-4436

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.

CVSS 8.7 · High · EPSS 1.8% · Fix available

Published

2013-11-05T18:00:00.000Z

Updated

2024-09-16T22:41:15.246Z

Stack: python

Check your server →