CVE-2017-5200

Published: Sep 26, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.

Affected (9)

Products: Saltstack: Salt

Saltstack

1 product

Salt

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Saltstack Salt	Up to 2015.8.12
Saltstack Salt	Version 2016.11.0
Saltstack Salt	Version 2016.11.1
Saltstack Salt	Version 2016.11.2
Saltstack Salt	Version 2016.3.0
Saltstack Salt	Version 2016.3.1
Saltstack Salt	Version 2016.3.2
Saltstack Salt	Version 2016.3.3
Saltstack Salt	Version 2016.3.4