Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.

References

• https://nvd.nist.gov/vuln/detail/CVE-2013-4435
• http://docs.saltstack.com/topics/releases/0.17.1.html
• http://www.openwall.com/lists/oss-security/2013/10/18/3
• https://github.com/saltstack/salt/blob/master/doc/topics/releases/0.17.1.rst