CVE-2013-4435: High severity saltstack vulnerability
Published Nov 5, 2013
·Updated
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
Affected Software
8 affected componentsFixes available
pip/salt>=0.15.0<=0.17.0
0.17.1
SaltStack Salt=0.15.0
SaltStack Salt=0.15.1
SaltStack Salt=0.16.0
SaltStack Salt=0.16.2
SaltStack Salt=0.16.3
SaltStack Salt=0.16.4
SaltStack Salt=0.17.0
Remediation
Patch Available
Event History
Nov 5, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·04:58 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-4435?
CVE-2013-4435 is considered a moderate severity vulnerability that allows remote authenticated users to execute restricted routines.
2
How do I fix CVE-2013-4435?
To fix CVE-2013-4435, upgrade SaltStack to version 0.17.1 or later.
3
Who is affected by CVE-2013-4435?
CVE-2013-4435 affects SaltStack versions 0.15.0 to 0.17.0.
4
What types of authentication are exploited in CVE-2013-4435?
CVE-2013-4435 can be exploited by remote authenticated users using external authentication or client ACL.
5
What are the implications of CVE-2013-4435?
Exploitation of CVE-2013-4435 may allow unauthorized access to restricted functionalities within the SaltStack software.