CVE-2013-4439

Published: Nov 5, 2013Modified: Apr 29, 2026

4.9

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Exploitability: 6.8 / Impact: 4.9

Source: NVD

Description

Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.

Affected (7)

Products: Saltstack: Salt

Saltstack

1 product

Salt

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Saltstack Salt	Version 0.15.0
Saltstack Salt	Version 0.15.1
Saltstack Salt	Version 0.16.0
Saltstack Salt	Version 0.16.2
Saltstack Salt	Version 0.16.3
Saltstack Salt	Version 0.16.4
Saltstack Salt	Version 0.17.0