Skip to content
OpenAdvisories

Archive

January 2017

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.3

    Salt uses weak permissions on the cache data

    The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

  • Low 3.7

    Urllib3 Incorrect Certificate Validation

    Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middl…