CVE-2017-12791

—

CVSS 3.0

9.8 critical

EPSS

5%p91

Published

Aug 23, 2017 (Aug 23, 2017)

Modified

Jun 17, 2026

Description

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.

Vendors: saltstack
Products: salt
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.7%)

In the news0 stories

No ingested article mentions this CVE yet.