Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SaltStack Salt 路径遍历漏洞
Vulnerability Description
SaltStack Salt（又名SaltStack）是美国SaltStack公司的一套开源的用于管理基础架构的工具。该工具提供配置管理、远程执行等功能，能够管理上万台服务器，具有快速完成数据传递的能力。 SaltStack Salt 2016.11.7之前的版本和2017.7.1之前的2017.7.x版本中的minion id验证存在目录遍历漏洞。远程攻击者可借助特制的minion ID利用该漏洞认证master。
CVSS Information
N/A
Vulnerability Type
N/A