Latest vulnerabilities for "saltstack"

SaltStack Salt2 vulnerabilities

Risk 23

First published (updated )

Advisory

saltproject-2024-01-31-advisory

Specially crafted url can be created which leads to a directory traversal in the salt file server

Risk 45

Severity

7.7

First published (updated )

CVE-2024-22232

Syndic cache directory creation is vulnerable to a directory traversal attack

Risk 27

Severity

5

First published (updated )

CVE-2024-22231

SaltStack SaltATTENTION! Some High and Medium severity vulnerabilities have been discovered in Salt versions 3006.5 and earlier

Risk 42

First published (updated )

Advisory

saltproject-2024-01-30-advisory

SaltStack Salt1 vulnerability

Risk 23

First published (updated )

Advisory

saltproject-2023-10-27-advisory

Salt security advisory release - 2023-OCT-27

Risk 62

Severity

6.7

First published (updated )

CVE-2023-34049

SaltStack SaltATTENTION! A Medium severity vulnerability has been discovered in Salt versions 3006.3 and earlier

Risk 35

First published (updated )

Advisory

saltproject-2023-10-26-advisory

SaltStack Salt2 vulnerabilities

Risk 23

First published (updated )

Advisory

saltproject-2023-08-10-advisory

Git Providers can read from the wrong environment because they get the same cache directory base nam…

Risk 68

Severity

7.8

First published (updated )

CVE-2023-20898

DOS in minion return.

Risk 28

Severity

5.3

First published (updated )

CVE-2023-20897

SaltStack SaltATTENTION! Some medium severity vulnerabilities have been discovered in Salt versions 3006.1 and earlier

Risk 35

First published (updated )

Advisory

saltproject-2023-08-09-advisory

SaltStack SaltBuffer Overflow

Risk 86

Severity

9.8

First published (updated )

CVE-2021-33226

SaltStack Salt1 vulnerability

Risk 23

First published (updated )

Advisory

saltproject-2022-06-21-advisory

PAM auth fails to reject locked accounts.

Risk 82

Severity

8.8

First published (updated )

CVE-2022-22967

SaltStack SaltAttention! A critical vulnerability has been discovered in Salt versions 3004.1 and earlier

Risk 49

First published (updated )

Advisory

saltproject-2022-06-13-advisory

SaltStack Salt4 vulnerabilities

Risk 23

First published (updated )

Advisory

saltproject-2022-03-28-advisory

Minion authentication denial of service.

Risk 23

Severity

4.3

First published (updated )

CVE-2022-22935

Job publishes and file server replies are susceptible to replay attacks.

Risk 82

Severity

8.8

First published (updated )

CVE-2022-22936

When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…

Risk 82

Severity

8.8

First published (updated )

CVE-2022-22941

Salt Masters do not sign pillar data with the minion’s public key.

Risk 82

Severity

8.8

First published (updated )

CVE-2022-22934

SaltStack SaltATTENTION! Some critical vulnerabilities have been discovered in Salt versions 3004 and earlier

Risk 42

First published (updated )

Advisory

saltproject-2022-03-22-advisory

SaltStack Salt3 vulnerabilities

Risk 23

First published (updated )

Advisory

saltproject-2021-09-21-advisory

Race Condition

Risk 59

Severity

6.4

First published (updated )

CVE-2021-22004

A user who has control of the source, and source_hash URLs can gain full file system access as root …

Risk 73

Severity

7.5

First published (updated )

CVE-2021-21996

Command Injection, OS Command Injection

Risk 72

Severity

7.8

First published (updated )

CVE-2021-31607

SaltStack Saltsalt-api unauthenticated remote code execution

Risk 89

Severity

9.8

First published (updated )

CVE-2021-25315

SaltStack SaltLast updated 8 August 2024

Risk 27

Severity

4.4

First published (updated )

CVE-2021-25284

SaltStack SaltCode Injection

Risk 89

Severity

9.8

First published (updated )

CVE-2021-25283

SaltStack SaltLast updated 8 August 2024

Risk 37

Severity

5.9

First published (updated )

CVE-2020-28972

SaltStack SaltPath Traversal

Risk 69

Severity

9.1

First published (updated )

CVE-2021-25282

Trending

Versions

SaltStack Salt2 vulnerabilities

Specially crafted url can be created which leads to a directory traversal in the salt file server

Syndic cache directory creation is vulnerable to a directory traversal attack

SaltStack SaltATTENTION! Some High and Medium severity vulnerabilities have been discovered in Salt versions 3006.5 and earlier

SaltStack Salt1 vulnerability

Salt security advisory release - 2023-OCT-27

SaltStack SaltATTENTION! A Medium severity vulnerability has been discovered in Salt versions 3006.3 and earlier

SaltStack Salt2 vulnerabilities

Git Providers can read from the wrong environment because they get the same cache directory base nam…

DOS in minion return.

Don't miss critical vulnerabilities

SaltStack SaltATTENTION! Some medium severity vulnerabilities have been discovered in Salt versions 3006.1 and earlier

SaltStack SaltBuffer Overflow

SaltStack Salt1 vulnerability

PAM auth fails to reject locked accounts.

SaltStack SaltAttention! A critical vulnerability has been discovered in Salt versions 3004.1 and earlier

SaltStack Salt4 vulnerabilities

Minion authentication denial of service.

Job publishes and file server replies are susceptible to replay attacks.

When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…

Salt Masters do not sign pillar data with the minion’s public key.

Don't miss critical vulnerabilities

SaltStack SaltATTENTION! Some critical vulnerabilities have been discovered in Salt versions 3004 and earlier

SaltStack Salt3 vulnerabilities

Race Condition

A user who has control of the source, and source_hash URLs can gain full file system access as root …

Command Injection, OS Command Injection

SaltStack Saltsalt-api unauthenticated remote code execution

SaltStack SaltLast updated 8 August 2024

SaltStack SaltCode Injection

Don't miss critical vulnerabilities

SaltStack SaltLast updated 8 August 2024

SaltStack SaltPath Traversal

Company

Resources

Contact