Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Salt 安全漏洞
Vulnerability Description
SaltStack Salt（又名SaltStack）是美国SaltStack公司的一套开源的用于管理基础架构的工具。该工具提供配置管理、远程执行等功能，能够管理上万台服务器，具有快速完成数据传递的能力。 Salt 2015.8.4之前2015.8.x版本中存在安全漏洞，该漏洞源于程序没有正确清除minion上的消息。攻击者可通过向minion-master数据流中插入数据包利用该漏洞实施中间人攻击，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A