Approved changes feed: RSS · Atom

cpe:2.3:a:saltstack:salt:2015.8.1:*:*:*:*:*:*:*

part: a version: 2015.8.1 update: *

VendorSaltstack (505beb5a-4fc5-5540-9632-5d28b16aab0d)
ProductSalt (dd0d2bbf-d65f-5171-9eae-a243e2f3cc18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/saltstack/salt purl2cpe 2026-06-01 10:16:14.739123
pkg:rpm/fedora/salt purl2cpe 2026-06-01 10:16:14.739124
pkg:rpm/opensuse/salt purl2cpe 2026-06-01 10:16:14.739126

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3176 vulnerable 2026-06-08 05:07:44.945183 Details available
Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.
Published: 2017-01-31T19:00:00.000Z
Updated: 2024-08-05T23:47:58.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1866 vulnerable 2026-06-08 05:07:32.151660 Details available
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.
Published: 2016-04-12T14:00:00.000Z
Updated: 2024-08-05T23:10:39.823Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.