CVE-2013-4438

Summary

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2013/10/18/3
• http://docs.saltstack.com/topics/releases/0.17.1.html

References

• http://www.openwall.com/lists/oss-security/2013/10/18/3
• http://docs.saltstack.com/topics/releases/0.17.1.html

• ←Previous
• Next→