suse · CVE-2017-12791

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-12791 severity moderate: SUSE including 398 source package names (amazon/suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64, amazon/suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64, …), 496 product×package rows across 51 product lines (Container caasp/v4/salt-api, Container caasp/v4/salt-master, … (51 product lines)): Known Affected 231, Fixed 218, Known Not Affected 47.

Description:

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.