CVE-2015-4017

Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.

• CWE-295

• http://www.openwall.com/lists/oss-security/2015/05/19/2Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1222960Issue Tracking, Patch, Third Party Advisory
• https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.htmlPatch, Release Notes, Vendor Advisory
• https://groups.google.com/forum/#%21topic/salt-users/8Kv1bytGD6c
• http://www.openwall.com/lists/oss-security/2015/05/19/2Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1222960Issue Tracking, Patch, Third Party Advisory
• https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.htmlPatch, Release Notes, Vendor Advisory
• https://groups.google.com/forum/#%21topic/salt-users/8Kv1bytGD6c

Published

Aug 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4001Integer signedness error in the oz_hcd_get_desc_cnf function…
• CVE-2015-4002drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in t…
• CVE-2015-4003The oz_usb_handle_ep_data function in drivers/staging/ozwpan…
• CVE-2015-4004The OZWPAN driver in the Linux kernel through 4.0.5 relies o…
• CVE-2015-4010Cross-site request forgery (CSRF) vulnerability in the Encry…
• CVE-2015-4016The client detection protocol in Valve Steam allows remote a…
• CVE-2015-4018SQL injection vulnerability in feedwordpresssyndicationpage.…
• CVE-2015-4020RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x …
• CVE-2015-4021The phar_parse_tarfile function in ext/phar/tar.c in PHP bef…
• CVE-2015-4022Integer overflow in the ftp_genlist function in ext/ftp/ftp.…
• CVE-2015-4024Algorithmic complexity vulnerability in the multipart_buffer…
• CVE-2015-4025PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6…