CVE Catalog

CVE-2016-9639

Critical
Published: Translated: NVD NIST

Summary

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

Risk Assessment

Deleted minions may gain access to other minions' data, posing a risk of unauthorized access and potential data loss.

Recommendation

It is recommended to upgrade to Salt version 2015.8.11 or later to mitigate this vulnerability.

Original NVD description (English source)

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS