p PatchFirst

CVE-2013-6617

CVE-2013-6617

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.

CVSS 8.7 · High · EPSS 3.0% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • salt PyPI

    Versions
    • 0.11.0
    • 0.11.1
    • 0.12.0
    • 0.12.1
    • 0.13.0
    • 0.13.1
    • 0.13.2
    • 0.13.3
    • 0.14.0
    • 0.14.1
    • 0.15.0
    • 0.15.1
    • 0.15.2
    • 0.15.3
    • 0.15.90
    • 0.16.0
    • 0.16.1
    • 0.16.2
    • 0.16.3
    • 0.16.4
    • 0.17.0
    • 0.17.0rc1
    Affected ranges
    • ECOSYSTEM: ≥ 0.11.0, < 0.17.1

    Update to 0.17.1

Original sources

Check your server →