Directory Traversal Vulnerability in SaltStack Salt Affects Multiple Versions
CVE-2017-14695

9.8CRITICAL

Key Information:

Vendor: Saltstack
Status: Salt
Vendor: CVE Published:; 24 October 2017

What is CVE-2017-14695?

A directory traversal vulnerability exists in SaltStack Salt, allowing remote minions with invalid credentials to authenticate with a master server using a manipulated minion ID. This flaw, linked to an incomplete fix for a prior issue, affects multiple versions of the product, necessitating immediate updates to secure against unauthorized access.