CVE-2013-6617
saltstack salt: no CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days. Fixed in salt 0.17.1.
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- saltstack:salt
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-7wx3-vr2f-6p29 | PyPI | salt | >=0.11.0 <0.17.1 | 0.17.1 |
| PYSEC-2013-15 | PyPI | salt | >=0.11.0 <0.17.1 | 0.17.1 |