Bug 1445655 – CVE-2017-8109 salt: Minion code copies over configuration from the Salt Master without adjusting permissions

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1445655 - (CVE-2017-8109) CVE-2017-8109 salt: Minion code copies over configuration from the Salt Master without adjusting permissions

Summary:	CVE-2017-8109 salt: Minion code copies over configuration from the Salt Maste...

Status:	CLOSED NOTABUG

Aliases:	CVE-2017-8109

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=moderate,public=20170425,repor...
Keywords:	Security

Depends On:	1418350
Blocks:	1445661
	Show dependency tree / graph

Reported:	2017-04-26 04:52 EDT by Andrej Nemec
Modified:	2017-10-11 11:28 EDT (History)
CC List:	5 users (show)

See Also:
Fixed In Version:	salt 2016.11.4
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2017-04-26 08:33:12 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Andrej Nemec 2017-04-26 04:52:15 EDT

The salt-ssh minion code in SaltStack Salt copies over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients).

Upstream bug:

https://github.com/saltstack/salt/issues/40075

Upstream patch:

https://github.com/saltstack/salt/pull/40609/commits/6e34c2b5e5e849302af7ccd00509929c3809c658

References:

https://docs.saltstack.com/en/latest/topics/releases/2016.11.4.html

Comment 1 Andrej Nemec 2017-04-26 04:54:01 EDT

Created salt tracking bugs for this issue:

Affects: epel-all [bug 1418350]

Comment 2 Siddharth Sharma 2017-04-26 08:33:12 EDT

Statement:

This issue did not affect the versions of the salt as shipped with Red Hat Ceph Storage 1.3, Red Hat Ceph Storage 2, and Red Hat Storage Console 2 as salt-ssh is not used with these products.

Note You need to log in before you can comment on or make changes to this bug.