CVE-2016-3176: Medium severity SaltStack Salt vulnerability
Published Jan 31, 2017
·Updated
Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.
Affected Software
10 affected componentsFixes available
pip/salt>=2015.8<2015.8.8
2015.8.8
pip/salt<2015.5.10
2015.5.10
SaltStack Salt<=2015.5.9
SaltStack Salt=2015.8.0
SaltStack Salt=2015.8.1
SaltStack Salt=2015.8.2
SaltStack Salt=2015.8.3
SaltStack Salt=2015.8.4
SaltStack Salt=2015.8.5
SaltStack Salt=2015.8.7
Event History
Jan 31, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:59 PM
DescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·03:01 AM
Frequently Asked Questions
1
What is the severity of CVE-2016-3176?
CVE-2016-3176 is considered a high-severity vulnerability that enables authentication bypass in SaltStack.
2
How do I fix CVE-2016-3176?
To fix CVE-2016-3176, upgrade to Salt version 2015.5.10 or 2015.8.8 or later.
3
Which versions are affected by CVE-2016-3176?
CVE-2016-3176 affects SaltStack versions prior to 2015.5.10 and 2015.8.8.
4
How does CVE-2016-3176 allow attackers to exploit the system?
CVE-2016-3176 allows attackers to bypass authentication by submitting an alternate service command to LocalClient.
5
Does CVE-2016-3176 affect multiple versions of SaltStack?
Yes, CVE-2016-3176 affects multiple versions including 2015.5.9 and all 2015.8.x versions prior to 2015.8.8.