saltproject-2023-10-26-advisory: ATTENTION! A Medium severity vulnerability has been discovered in Salt versions 3006.3 and earlier
A Medium severity vulnerability has been discovered in Salt versions 3006.3 and earlier. The vulnerability is Medium severity based on the common Vulnerability Scoring System (CVSS).
Other sources
Dear Salt users and Salt Project Community members, A Medium rated vulnerability has been discovered in Salt versions 3006.3 and earlier. The vulnerability is a Medium rating based on the Common Vulnerability Scoring System (CVSS). We are preparing a CVE release that will be available on Friday, October 27. The CVE packages will be available for 3005.4 and 3006.4. The releases will contain the fix available to resolve and remediate the identified vulnerability. We advise all users to quickly apply the CVE release as soon as the packages are available. Please reach out if you have any questions or comments. You can reach us at saltproject-security.pdl@broadcom.com. Thank you, Your Salt Open Core team
— Salt Project
Affected Software
Event History
Frequently Asked Questions
What is the severity of saltproject-2023-10-26-advisory?
The vulnerability identified in saltproject-2023-10-26-advisory has a Medium severity rating according to CVSS.
What versions of Salt are affected by saltproject-2023-10-26-advisory?
Salt versions 3006.3 and earlier are affected by the vulnerability described in saltproject-2023-10-26-advisory.
How do I fix saltproject-2023-10-26-advisory?
To fix the vulnerability in saltproject-2023-10-26-advisory, it is recommended to upgrade to a later version of Salt that addresses the issue.
Is the saltproject-2023-10-26-advisory vulnerability being actively exploited?
There is no public information indicating that the vulnerability in saltproject-2023-10-26-advisory is currently being actively exploited.
Who should be concerned about saltproject-2023-10-26-advisory?
Users and administrators of Salt versions 3006.3 and earlier should be concerned about the vulnerabilities outlined in saltproject-2023-10-26-advisory.