CVE-2016-3176 Salt Insecure configuration of PAM external authentication service
MediumCVSS 5.6
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi salt(PyPI) | < 2015.5.10 | 2015.5.10 |
| pypi salt(PyPI) | = 0.10.0 | No fix listed |
| pypi salt(PyPI) | = 0.10.1 | No fix listed |
| pypi salt(PyPI) | = 0.10.2 | No fix listed |
| pypi salt(PyPI) | = 0.10.3 | No fix listed |
| pypi salt(PyPI) | = 0.10.4 | No fix listed |
| pypi salt(PyPI) | = 0.10.5 | No fix listed |
| pypi salt(PyPI) | = 0.11.0 | No fix listed |
| pypi salt(PyPI) | = 0.11.1 | No fix listed |
| pypi salt(PyPI) | = 0.12.0 | No fix listed |
| pypi salt(PyPI) | = 0.12.1 | No fix listed |
| pypi salt(PyPI) | = 0.13.0 | No fix listed |
| pypi salt(PyPI) | = 0.13.1 | No fix listed |
| pypi salt(PyPI) | = 0.13.2 | No fix listed |
| pypi salt(PyPI) | = 0.13.3 | No fix listed |
| pypi salt(PyPI) | = 0.14.0 | No fix listed |
| pypi salt(PyPI) | = 0.14.1 | No fix listed |
| pypi salt(PyPI) | = 0.15.0 | No fix listed |
| pypi salt(PyPI) | = 0.15.1 | No fix listed |
| pypi salt(PyPI) | = 0.15.2 | No fix listed |
| pypi salt(PyPI) | = 0.15.3 | No fix listed |
| pypi salt(PyPI) | = 0.15.90 | No fix listed |
| pypi salt(PyPI) | = 0.16.0 | No fix listed |
| pypi salt(PyPI) | = 0.16.1 | No fix listed |
| pypi salt(PyPI) | = 0.16.2 | No fix listed |
Show 82 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi salt(PyPI) | = 0.16.3 | No fix listed |
| pypi salt(PyPI) | = 0.16.4 | No fix listed |
| pypi salt(PyPI) | = 0.17.0 | No fix listed |
| pypi salt(PyPI) | = 0.17.0rc1 | No fix listed |
| pypi salt(PyPI) | = 0.17.1 | No fix listed |
| pypi salt(PyPI) | = 0.17.2 | No fix listed |
| pypi salt(PyPI) | = 0.17.3 | No fix listed |
| pypi salt(PyPI) | = 0.17.4 | No fix listed |
| pypi salt(PyPI) | = 0.17.5 | No fix listed |
| pypi salt(PyPI) | = 0.8.7 | No fix listed |
| pypi salt(PyPI) | = 0.8.9 | No fix listed |
| pypi salt(PyPI) | = 0.9.0 | No fix listed |
| pypi salt(PyPI) | = 0.9.1 | No fix listed |
| pypi salt(PyPI) | = 0.9.2 | No fix listed |
| pypi salt(PyPI) | = 0.9.3 | No fix listed |
| pypi salt(PyPI) | = 0.9.4 | No fix listed |
| pypi salt(PyPI) | = 0.9.5 | No fix listed |
| pypi salt(PyPI) | = 0.9.6 | No fix listed |
| pypi salt(PyPI) | = 0.9.7 | No fix listed |
| pypi salt(PyPI) | = 0.9.8 | No fix listed |
| pypi salt(PyPI) | = 0.9.9 | No fix listed |
| pypi salt(PyPI) | = 0.9.9.1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc2 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc3 | No fix listed |
| pypi salt(PyPI) | = 2014.1.1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.10 | No fix listed |
| pypi salt(PyPI) | = 2014.1.11 | No fix listed |
| pypi salt(PyPI) | = 2014.1.12 | No fix listed |
| pypi salt(PyPI) | = 2014.1.13 | No fix listed |
| pypi salt(PyPI) | = 2014.1.2 | No fix listed |
| pypi salt(PyPI) | = 2014.1.3 | No fix listed |
| pypi salt(PyPI) | = 2014.1.4 | No fix listed |
| pypi salt(PyPI) | = 2014.1.5 | No fix listed |
| pypi salt(PyPI) | = 2014.1.6 | No fix listed |
| pypi salt(PyPI) | = 2014.1.7 | No fix listed |
| pypi salt(PyPI) | = 2014.1.8 | No fix listed |
| pypi salt(PyPI) | = 2014.1.9 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc1 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc2 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc3 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc4 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc5 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc6 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc7 | No fix listed |
| pypi salt(PyPI) | = 2014.7.1 | No fix listed |
| pypi salt(PyPI) | = 2014.7.2 | No fix listed |
| pypi salt(PyPI) | = 2014.7.3 | No fix listed |
| pypi salt(PyPI) | = 2014.7.4 | No fix listed |
| pypi salt(PyPI) | = 2014.7.5 | No fix listed |
| pypi salt(PyPI) | = 2014.7.6 | No fix listed |
| pypi salt(PyPI) | = 2014.7.7 | No fix listed |
| pypi salt(PyPI) | = 2015.2.0rc1 | No fix listed |
| pypi salt(PyPI) | = 2015.2.0rc2 | No fix listed |
| pypi salt(PyPI) | = 2015.5.0 | No fix listed |
| pypi salt(PyPI) | = 2015.5.1 | No fix listed |
| pypi salt(PyPI) | = 2015.5.2 | No fix listed |
| pypi salt(PyPI) | = 2015.5.3 | No fix listed |
| pypi salt(PyPI) | = 2015.5.4 | No fix listed |
| pypi salt(PyPI) | = 2015.5.5 | No fix listed |
| pypi salt(PyPI) | = 2015.5.6 | No fix listed |
| pypi salt(PyPI) | = 2015.5.7 | No fix listed |
| pypi salt(PyPI) | = 2015.5.8 | No fix listed |
| pypi salt(PyPI) | = 2015.5.9 | No fix listed |
| pypi salt(PyPI) | >= 2015.8, < 2015.8.8 | 2015.8.8 |
| pypi salt(PyPI) | = 2015.8.0 | No fix listed |
| pypi salt(PyPI) | = 2015.8.1 | No fix listed |
| pypi salt(PyPI) | = 2015.8.2 | No fix listed |
| pypi salt(PyPI) | = 2015.8.3 | No fix listed |
| pypi salt(PyPI) | = 2015.8.4 | No fix listed |
| pypi salt(PyPI) | = 2015.8.5 | No fix listed |
| pypi salt(PyPI) | = 2015.8.7 | No fix listed |
| saltstack salt | <= 2015.5.9 | No fix listed |
| saltstack salt | = 2015.8.0 | No fix listed |
| saltstack salt | = 2015.8.1 | No fix listed |
| saltstack salt | = 2015.8.2 | No fix listed |
| saltstack salt | = 2015.8.3 | No fix listed |
| saltstack salt | = 2015.8.4 | No fix listed |
| saltstack salt | = 2015.8.5 | No fix listed |
| saltstack salt | = 2015.8.7 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- docs.saltstack.com release-notes vendor-advisory
- docs.saltstack.com release-notes vendor-advisory
- github.com
- github.com product
- github.com vendor-advisory