CVSS 3.0
9.1 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCVE-2016-9639
Critical (9.1) in saltstack salt. EPSS 2.6% chance of exploitation in the next 30 days. Fixed in salt 2015.8.11.
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.
Severity
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- saltstack:salt
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-hvmj-356c-gpf4 | PyPI | salt | <2015.8.11 | 2015.8.11 |
| PYSEC-2017-34 | PyPI | salt | <2015.8.11 | 2015.8.11 |