CVE-2020-17490
06.11.2020, 08:15
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| saltstack | salt | 𝑥 < 2015.8.10 |
| saltstack | salt | 2015.8.11 ≤ 𝑥 < 2015.8.13 |
| saltstack | salt | 2016.3.0 ≤ 𝑥 < 2016.3.4 |
| saltstack | salt | 2016.3.5 ≤ 𝑥 < 2016.3.6 |
| saltstack | salt | 2016.3.7 ≤ 𝑥 < 2016.3.8 |
| saltstack | salt | 2016.11.0 ≤ 𝑥 < 2016.11.3 |
| saltstack | salt | 2016.11.4 ≤ 𝑥 < 2016.11.6 |
| saltstack | salt | 2016.11.7 ≤ 𝑥 < 2016.11.10 |
| saltstack | salt | 2017.5.0 ≤ 𝑥 < 2017.7.4 |
| saltstack | salt | 2017.7.5 ≤ 𝑥 < 2017.7.8 |
| saltstack | salt | 2018.2.0 ≤ 𝑥 < 2018.3.5 |
| saltstack | salt | 2019.2.0 ≤ 𝑥 < 2019.2.5 |
| saltstack | salt | 3000.0 ≤ 𝑥 < 3000.3 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References