VDB

CVE-2017-5192

CVE-2017-5192 PUBLISHED

When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed. The LocalClient.cmd_batch() method client does not accept external_auth credentials and so access to it from salt-api has been removed for now. This vulnerability allows code execution for already-authenticated users and is only in effect when running salt-api as the root user.

EPSS 0.48% · 65.4th percentile

Risk Scores

EPSS Score
0.48%
65.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSsalt0, 2015.5.3+ds-1, 2015.8.1+ds-2
Ubuntu:Pro:14.04:LTSsalt0.16.4-2, 0.17.1+dfsg-1, 0.17.2-1

Timeline

  • Sep 26, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 22, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 25, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 27, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Jul 2, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 5, 2022 EPSS Score
  • Jan 7, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›