What is GHSA-g283-88v5-rmq2?

GHSA-g283-88v5-rmq2 is a security advisory published by GitHub Security Advisories with Critical severity. SaltStack Salt allows compromised salt-minions to impersonate the salt-master

Which CVE IDs does GHSA-g283-88v5-rmq2 cover?

GHSA-g283-88v5-rmq2 covers the following CVE IDs: CVE-2017-7893. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g283-88v5-rmq2?

GHSA-g283-88v5-rmq2 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-g283-88v5-rmq2?

GHSA-g283-88v5-rmq2 affects 1 product, including: pip/salt:\u003c 2016.3.6.

GHSA-g283-88v5-rmq2CriticalCVSS 9.8

SaltStack Salt allows compromised salt-minions to impersonate the salt-master

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

October 26, 2024

🔗 CVE IDs covered (1)

CVE-2017-7893 →

📋 Description

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

🎯 Affected products1

pip/salt:< 2016.3.6

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2017-7893
https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-50.yaml
https://github.com/advisories/GHSA-g283-88v5-rmq2