CVE-2016-3176 in Salt

सारांश

द्वारा VulDB • 29/06/2026

Salt versions prior to 2015.5.10 and 2015.8.x prior to 2015.8.8, when PAM external authentication is enabled, allow attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• आरक्षित करना: 15/03/2016
• प्रकटीकरण: 31/01/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-96330
• CPE: तैयार
• CWE: CWE-287 (पुष्टि की गई)
• CVSS: 5.6 (NVD)
• EPSS: 0.00873
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-3176
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3176
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-3176/