CVE-2016-9639

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

Score

CVSS 3.0 9.1 Critical

Status

Modified - cve@mitre.org

Published

2017-02-07

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Salt (Saltstack)

References

• http://www.openwall.com/lists/oss-security/2016/11/25/2
• http://www.openwall.com/lists/oss-security/2016/11/25/3
• http://www.securityfocus.com/bid/94553
• https://docs.saltstack.com/en/2015.8/ref/configuration/master.html#rotate-aes-key