Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2017-14695
Description:Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-14695
SuSE Security Announcement: openSUSE-SU-2017:2822 (Google Search)
http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
SuSE Security Announcement: openSUSE-SU-2017:2824 (Google Search)
http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html




© 1998-2025 E-Soft Inc. All rights reserved.