Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-pr6t-nw24-cfcp
SummaryThe salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients).
Aliases
0
alias CVE-2017-8109
1
alias PYSEC-2017-82
Fixed_packages
0
url pkg:pypi/salt@2016.11.4
purl pkg:pypi/salt@2016.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-58p2-6c4u-tybp
6
vulnerability VCID-5hr1-5aec-43h3
7
vulnerability VCID-65p4-5x86-y3fj
8
vulnerability VCID-6cfw-9xe8-43d6
9
vulnerability VCID-7mam-gwcp-8kdm
10
vulnerability VCID-8mpz-ke16-fbej
11
vulnerability VCID-a8kw-uehx-xfg5
12
vulnerability VCID-ce2x-ehyk-nufk
13
vulnerability VCID-cubj-wrbp-1qbu
14
vulnerability VCID-e6kv-phwy-vfef
15
vulnerability VCID-e8qc-mktf-gyam
16
vulnerability VCID-gafc-bb59-9yhb
17
vulnerability VCID-h4tm-9wqz-1qge
18
vulnerability VCID-hgv6-czxs-cfbc
19
vulnerability VCID-j5th-837s-fkft
20
vulnerability VCID-jbea-m4ak-tqd7
21
vulnerability VCID-jyxg-h3a9-8ygv
22
vulnerability VCID-k1gu-khda-jyeb
23
vulnerability VCID-kapu-yvhn-ybhw
24
vulnerability VCID-mbpz-g2vs-tqc1
25
vulnerability VCID-neby-tsrt-ryg5
26
vulnerability VCID-nehw-r7zm-j7bb
27
vulnerability VCID-p4xa-ks7v-wbay
28
vulnerability VCID-qgqk-f1g2-7fbz
29
vulnerability VCID-saff-gz5j-8kex
30
vulnerability VCID-v43a-k2bg-wkbz
31
vulnerability VCID-w2qv-hbsf-xyfh
32
vulnerability VCID-znn9-qud3-wqat
33
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.4
Affected_packages
0
url pkg:pypi/salt@2016.11.0
purl pkg:pypi/salt@2016.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-58p2-6c4u-tybp
6
vulnerability VCID-5hr1-5aec-43h3
7
vulnerability VCID-65p4-5x86-y3fj
8
vulnerability VCID-6cfw-9xe8-43d6
9
vulnerability VCID-7mam-gwcp-8kdm
10
vulnerability VCID-8mpz-ke16-fbej
11
vulnerability VCID-a8kw-uehx-xfg5
12
vulnerability VCID-ce2x-ehyk-nufk
13
vulnerability VCID-cubj-wrbp-1qbu
14
vulnerability VCID-e6kv-phwy-vfef
15
vulnerability VCID-e8qc-mktf-gyam
16
vulnerability VCID-gafc-bb59-9yhb
17
vulnerability VCID-h4tm-9wqz-1qge
18
vulnerability VCID-hgv6-czxs-cfbc
19
vulnerability VCID-j5th-837s-fkft
20
vulnerability VCID-jbea-m4ak-tqd7
21
vulnerability VCID-jyxg-h3a9-8ygv
22
vulnerability VCID-k1gu-khda-jyeb
23
vulnerability VCID-kapu-yvhn-ybhw
24
vulnerability VCID-mbpz-g2vs-tqc1
25
vulnerability VCID-neby-tsrt-ryg5
26
vulnerability VCID-nehw-r7zm-j7bb
27
vulnerability VCID-p4xa-ks7v-wbay
28
vulnerability VCID-pr6t-nw24-cfcp
29
vulnerability VCID-qgqk-f1g2-7fbz
30
vulnerability VCID-reer-fk1f-tkbj
31
vulnerability VCID-saff-gz5j-8kex
32
vulnerability VCID-v43a-k2bg-wkbz
33
vulnerability VCID-w2qv-hbsf-xyfh
34
vulnerability VCID-xccs-pwhb-nuce
35
vulnerability VCID-znn9-qud3-wqat
36
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.0
1
url pkg:pypi/salt@2016.11.1
purl pkg:pypi/salt@2016.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-58p2-6c4u-tybp
6
vulnerability VCID-5hr1-5aec-43h3
7
vulnerability VCID-65p4-5x86-y3fj
8
vulnerability VCID-6cfw-9xe8-43d6
9
vulnerability VCID-7mam-gwcp-8kdm
10
vulnerability VCID-8mpz-ke16-fbej
11
vulnerability VCID-a8kw-uehx-xfg5
12
vulnerability VCID-ce2x-ehyk-nufk
13
vulnerability VCID-cubj-wrbp-1qbu
14
vulnerability VCID-e6kv-phwy-vfef
15
vulnerability VCID-e8qc-mktf-gyam
16
vulnerability VCID-gafc-bb59-9yhb
17
vulnerability VCID-h4tm-9wqz-1qge
18
vulnerability VCID-hgv6-czxs-cfbc
19
vulnerability VCID-j5th-837s-fkft
20
vulnerability VCID-jbea-m4ak-tqd7
21
vulnerability VCID-jyxg-h3a9-8ygv
22
vulnerability VCID-k1gu-khda-jyeb
23
vulnerability VCID-kapu-yvhn-ybhw
24
vulnerability VCID-mbpz-g2vs-tqc1
25
vulnerability VCID-neby-tsrt-ryg5
26
vulnerability VCID-nehw-r7zm-j7bb
27
vulnerability VCID-p4xa-ks7v-wbay
28
vulnerability VCID-pr6t-nw24-cfcp
29
vulnerability VCID-qgqk-f1g2-7fbz
30
vulnerability VCID-reer-fk1f-tkbj
31
vulnerability VCID-saff-gz5j-8kex
32
vulnerability VCID-v43a-k2bg-wkbz
33
vulnerability VCID-w2qv-hbsf-xyfh
34
vulnerability VCID-xccs-pwhb-nuce
35
vulnerability VCID-znn9-qud3-wqat
36
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.1
2
url pkg:pypi/salt@2016.11.2
purl pkg:pypi/salt@2016.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-58p2-6c4u-tybp
6
vulnerability VCID-5hr1-5aec-43h3
7
vulnerability VCID-65p4-5x86-y3fj
8
vulnerability VCID-6cfw-9xe8-43d6
9
vulnerability VCID-7mam-gwcp-8kdm
10
vulnerability VCID-8mpz-ke16-fbej
11
vulnerability VCID-a8kw-uehx-xfg5
12
vulnerability VCID-ce2x-ehyk-nufk
13
vulnerability VCID-cubj-wrbp-1qbu
14
vulnerability VCID-e6kv-phwy-vfef
15
vulnerability VCID-e8qc-mktf-gyam
16
vulnerability VCID-gafc-bb59-9yhb
17
vulnerability VCID-h4tm-9wqz-1qge
18
vulnerability VCID-hgv6-czxs-cfbc
19
vulnerability VCID-j5th-837s-fkft
20
vulnerability VCID-jbea-m4ak-tqd7
21
vulnerability VCID-jyxg-h3a9-8ygv
22
vulnerability VCID-k1gu-khda-jyeb
23
vulnerability VCID-kapu-yvhn-ybhw
24
vulnerability VCID-mbpz-g2vs-tqc1
25
vulnerability VCID-neby-tsrt-ryg5
26
vulnerability VCID-nehw-r7zm-j7bb
27
vulnerability VCID-p4xa-ks7v-wbay
28
vulnerability VCID-pr6t-nw24-cfcp
29
vulnerability VCID-qgqk-f1g2-7fbz
30
vulnerability VCID-saff-gz5j-8kex
31
vulnerability VCID-v43a-k2bg-wkbz
32
vulnerability VCID-w2qv-hbsf-xyfh
33
vulnerability VCID-znn9-qud3-wqat
34
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.2
3
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
References
0
reference_url https://bugzilla.suse.com/show_bug.cgi?id=1035912
reference_id
reference_type
scores
url https://bugzilla.suse.com/show_bug.cgi?id=1035912
1
reference_url https://docs.saltstack.com/en/latest/topics/releases/2016.11.4.html
reference_id
reference_type
scores
url https://docs.saltstack.com/en/latest/topics/releases/2016.11.4.html
2
reference_url https://github.com/saltstack/salt/issues/40075
reference_id
reference_type
scores
url https://github.com/saltstack/salt/issues/40075
3
reference_url https://github.com/saltstack/salt/pull/40609
reference_id
reference_type
scores
url https://github.com/saltstack/salt/pull/40609
4
reference_url https://github.com/saltstack/salt/pull/40609/commits/6e34c2b5e5e849302af7ccd00509929c3809c658
reference_id
reference_type
scores
url https://github.com/saltstack/salt/pull/40609/commits/6e34c2b5e5e849302af7ccd00509929c3809c658
5
reference_url http://www.securityfocus.com/bid/98095
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/98095
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-pr6t-nw24-cfcp