SaltStack RSA Key Generation Vulnerability in Remote Communications
CVE-2013-2228

8.1HIGH

Key Information:

Vendor

Saltstack

Status
Saltstack
Vendor
CVE Published:
3 December 2019

What is CVE-2013-2228?

The vulnerability in SaltStack's RSA Key Generation process allows remote attackers to exploit weaknesses in the encryption mechanism. This issue can lead to unauthorized decryption of sensitive communications, making data susceptible to interception and manipulation. Organizations using affected versions should prioritize updates to mitigate the risks posed by potential exploits targeting this vulnerability.

Affected Version(s)

SaltStack ≤ 0.15.0

References

https://security-tracker.debian.org/tracker/CVE-2013-2228
x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2228
x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/07/01/1
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.