Improper Certificate Validation in SaltStack Salt

1) Improper Certificate Validation

EUVDB-ID: #VU38423

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2015-4017

CWE-ID: CWE-295 - Improper Certificate Validation

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to manipulate data.

Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Salt: 2014.7.5

CPE2.3

• cpe:2.3:a:saltstack:salt:2014.7.5:*:*:*:*:*:*:*

External links

https://www.openwall.com/lists/oss-security/2015/05/19/2
https://bugzilla.redhat.com/show_bug.cgi?id=1222960
https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.html
https://groups.google.com/forum/#!topic/salt-users/8Kv1bytGD6c

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.