CVE-2016-1866
CVE-2016-1866
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.
CVSS 8.1 · High · EPSS 1.5% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
salt PyPI
- Versions
- 2015.8.0
- 2015.8.0rc1
- 2015.8.0rc2
- 2015.8.0rc3
- 2015.8.0rc4
- 2015.8.0rc5
- 2015.8.1
- 2015.8.2
- 2015.8.3
- Affected ranges
- ECOSYSTEM: ≥ 2015.8.0rc1, < 2015.8.4
Update to 2015.8.4
salt PyPI
- Versions
- 2015.8.0
- 2015.8.1
- 2015.8.2
- 2015.8.3
- Affected ranges
- ECOSYSTEM: ≥ 2015.8, < 2015.8.4
Update to 2015.8.4