CVE-2017-5192

Publication date

2017-09-26 14:00:00

Family

mitre

State

PUBLISHED

Description

When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.