Vulnerability Database

313,359

Total vulnerabilities in the database

CVE-2013-6617

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.

  • Published: Nov 5, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-6617
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
saltstack / salt 0.17.0 0.17.0.x
saltstack / salt 0.14.0 0.14.0.x
saltstack / salt 0.16.3 0.16.3.x
saltstack / salt 0.15.1 0.15.1.x
saltstack / salt 0.16.2 0.16.2.x
saltstack / salt 0.11.0 0.11.0.x
saltstack / salt 0.16.4 0.16.4.x
saltstack / salt 0.15.0 0.15.0.x
saltstack / salt 0.13.0 0.13.0.x
saltstack / salt 0.16.0 0.16.0.x
saltstack / salt 0.12.0 0.12.0.x