CVE-2013-4439
saltstack salt: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days. Fixed in salt 0.17.1.
Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- saltstack:salt
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jmv9-5gx8-7xpf | PyPI | salt | >=0.15.0 <0.17.1 | 0.17.1 |
| PYSEC-2013-14 | PyPI | salt | <0.17.1 | 0.17.1 |