CVE-2017-8109 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-8109 Interim 1 31 2024-11-18T03:08:33Z current 2021-05-30T13:55:58Z 2024-11-18T03:08:33Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-8109 The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html E-Mail link for SUSE-CU-2019:729-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html E-Mail link for SUSE-CU-2019:731-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html E-Mail link for SUSE-CU-2019:733-1 https://lists.suse.com/pipermail/sle-security-updates/2017-June/002947.html E-Mail link for SUSE-SU-2017:1581-1 https://lists.suse.com/pipermail/sle-security-updates/2017-June/002948.html E-Mail link for SUSE-SU-2017:1582-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container caasp/v4/salt-api:beta1 Container caasp/v4/salt-master:beta1 Container caasp/v4/salt-minion:beta1 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-SAP-BYOS SUSE Enterprise Storage 3 SUSE Enterprise Storage 4 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Manager Client Tools 12 SUSE Manager Proxy 3.0 SUSE Manager Server 3.0 salt-2016.11.4-42.2 salt-2016.11.4-45.2 salt-api-2016.11.4-45.2 salt-bash-completion-2016.11.4-45.2 salt-cloud-2016.11.4-45.2 salt-doc-2016.11.4-42.2 salt-doc-2016.11.4-45.2 salt-master-2016.11.4-45.2 salt-minion-2016.11.4-42.2 salt-minion-2016.11.4-45.2 salt-proxy-2016.11.4-45.2 salt-ssh-2016.11.4-45.2 salt-syndic-2016.11.4-45.2 salt-zsh-completion-2016.11.4-45.2 salt-2016.11.4-45.2 as a component of Container caasp/v4/salt-api:beta1 salt-api-2016.11.4-45.2 as a component of Container caasp/v4/salt-api:beta1 salt-master-2016.11.4-45.2 as a component of Container caasp/v4/salt-api:beta1 salt-2016.11.4-45.2 as a component of Container caasp/v4/salt-master:beta1 salt-master-2016.11.4-45.2 as a component of Container caasp/v4/salt-master:beta1 salt-2016.11.4-45.2 as a component of Container caasp/v4/salt-minion:beta1 salt-minion-2016.11.4-45.2 as a component of Container caasp/v4/salt-minion:beta1 salt-2016.11.4-45.2 as a component of Image SLES12-SP4-Azure-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP4-Azure-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP4-EC2-HVM-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP4-EC2-HVM-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP4-GCE-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP4-GCE-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP4-SAP-Azure-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP4-SAP-Azure-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP4-SAP-GCE-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP4-SAP-GCE-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP5-Azure-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP5-Azure-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP5-EC2-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP5-EC2-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP5-GCE-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP5-GCE-BYOS salt-2016.11.4-45.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS salt-minion-2016.11.4-45.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS salt-2016.11.4-45.2 as a component of SUSE Enterprise Storage 3 salt-master-2016.11.4-45.2 as a component of SUSE Enterprise Storage 3 salt-minion-2016.11.4-45.2 as a component of SUSE Enterprise Storage 3 salt-2016.11.4-45.2 as a component of SUSE Enterprise Storage 4 salt-master-2016.11.4-45.2 as a component of SUSE Enterprise Storage 4 salt-minion-2016.11.4-45.2 as a component of SUSE Enterprise Storage 4 salt-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-api-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-bash-completion-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-cloud-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-doc-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-master-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-minion-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-proxy-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-ssh-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-syndic-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-zsh-completion-2016.11.4-45.2 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 salt-2016.11.4-45.2 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 salt-minion-2016.11.4-45.2 as a component of SUSE Linux Enterprise Point of Sale 12 SP2 salt-2016.11.4-42.2 as a component of SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS salt-doc-2016.11.4-42.2 as a component of SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS salt-minion-2016.11.4-42.2 as a component of SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS salt-2016.11.4-42.2 as a component of SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS salt-doc-2016.11.4-42.2 as a component of SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS salt-minion-2016.11.4-42.2 as a component of SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS salt-2016.11.4-45.2 as a component of SUSE Manager Client Tools 12 salt-doc-2016.11.4-45.2 as a component of SUSE Manager Client Tools 12 salt-minion-2016.11.4-45.2 as a component of SUSE Manager Client Tools 12 salt-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-api-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-bash-completion-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-doc-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-master-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-minion-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-proxy-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-ssh-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-syndic-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-zsh-completion-2016.11.4-45.2 as a component of SUSE Manager Proxy 3.0 salt-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-api-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-bash-completion-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-doc-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-master-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-minion-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-proxy-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-ssh-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-syndic-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 salt-zsh-completion-2016.11.4-45.2 as a component of SUSE Manager Server 3.0 The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients). CVE-2017-8109 Container caasp/v4/salt-api:beta1:salt-2016.11.4-45.2 Container caasp/v4/salt-api:beta1:salt-api-2016.11.4-45.2 Container caasp/v4/salt-api:beta1:salt-master-2016.11.4-45.2 Container caasp/v4/salt-master:beta1:salt-2016.11.4-45.2 Container caasp/v4/salt-master:beta1:salt-master-2016.11.4-45.2 Container caasp/v4/salt-minion:beta1:salt-2016.11.4-45.2 Container caasp/v4/salt-minion:beta1:salt-minion-2016.11.4-45.2 Image SLES12-SP4-Azure-BYOS:salt-2016.11.4-45.2 Image SLES12-SP4-Azure-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP4-EC2-HVM-BYOS:salt-2016.11.4-45.2 Image SLES12-SP4-EC2-HVM-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP4-GCE-BYOS:salt-2016.11.4-45.2 Image SLES12-SP4-GCE-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP4-SAP-Azure-BYOS:salt-2016.11.4-45.2 Image SLES12-SP4-SAP-Azure-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP4-SAP-EC2-HVM-BYOS:salt-2016.11.4-45.2 Image SLES12-SP4-SAP-EC2-HVM-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP4-SAP-GCE-BYOS:salt-2016.11.4-45.2 Image SLES12-SP4-SAP-GCE-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP5-Azure-BYOS:salt-2016.11.4-45.2 Image SLES12-SP5-Azure-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP5-Azure-HPC-BYOS:salt-2016.11.4-45.2 Image SLES12-SP5-Azure-HPC-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP5-Azure-SAP-BYOS:salt-2016.11.4-45.2 Image SLES12-SP5-Azure-SAP-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP5-EC2-BYOS:salt-2016.11.4-45.2 Image SLES12-SP5-EC2-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP5-EC2-SAP-BYOS:salt-2016.11.4-45.2 Image SLES12-SP5-EC2-SAP-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP5-GCE-BYOS:salt-2016.11.4-45.2 Image SLES12-SP5-GCE-BYOS:salt-minion-2016.11.4-45.2 Image SLES12-SP5-GCE-SAP-BYOS:salt-2016.11.4-45.2 Image SLES12-SP5-GCE-SAP-BYOS:salt-minion-2016.11.4-45.2 SUSE Enterprise Storage 3:salt-2016.11.4-45.2 SUSE Enterprise Storage 3:salt-master-2016.11.4-45.2 SUSE Enterprise Storage 3:salt-minion-2016.11.4-45.2 SUSE Enterprise Storage 4:salt-2016.11.4-45.2 SUSE Enterprise Storage 4:salt-master-2016.11.4-45.2 SUSE Enterprise Storage 4:salt-minion-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-api-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-bash-completion-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-cloud-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-doc-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-master-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-minion-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-proxy-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-ssh-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-syndic-2016.11.4-45.2 SUSE Linux Enterprise Module for Advanced Systems Management 12:salt-zsh-completion-2016.11.4-45.2 SUSE Linux Enterprise Point of Sale 12 SP2:salt-2016.11.4-45.2 SUSE Linux Enterprise Point of Sale 12 SP2:salt-minion-2016.11.4-45.2 SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS:salt-2016.11.4-42.2 SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS:salt-doc-2016.11.4-42.2 SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS:salt-minion-2016.11.4-42.2 SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS:salt-2016.11.4-42.2 SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS:salt-doc-2016.11.4-42.2 SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS:salt-minion-2016.11.4-42.2 SUSE Manager Client Tools 12:salt-2016.11.4-45.2 SUSE Manager Client Tools 12:salt-doc-2016.11.4-45.2 SUSE Manager Client Tools 12:salt-minion-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-api-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-bash-completion-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-doc-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-master-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-minion-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-proxy-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-ssh-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-syndic-2016.11.4-45.2 SUSE Manager Proxy 3.0:salt-zsh-completion-2016.11.4-45.2 SUSE Manager Server 3.0:salt-2016.11.4-45.2 SUSE Manager Server 3.0:salt-api-2016.11.4-45.2 SUSE Manager Server 3.0:salt-bash-completion-2016.11.4-45.2 SUSE Manager Server 3.0:salt-doc-2016.11.4-45.2 SUSE Manager Server 3.0:salt-master-2016.11.4-45.2 SUSE Manager Server 3.0:salt-minion-2016.11.4-45.2 SUSE Manager Server 3.0:salt-proxy-2016.11.4-45.2 SUSE Manager Server 3.0:salt-ssh-2016.11.4-45.2 SUSE Manager Server 3.0:salt-syndic-2016.11.4-45.2 SUSE Manager Server 3.0:salt-zsh-completion-2016.11.4-45.2 low 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H