Filters

SaltStack Salt2 vulnerabilities

First published (updated )

Specially crafted url can be created which leads to a directory traversal in the salt file server

7.7
First published (updated )

Syndic cache directory creation is vulnerable to a directory traversal attack

First published (updated )

SaltStack SaltATTENTION! Some High and Medium severity vulnerabilities have been discovered in Salt versions 3006.5 and earlier

First published (updated )

SaltStack Salt1 vulnerability

First published (updated )

Salt security advisory release - 2023-OCT-27

First published (updated )

SaltStack SaltATTENTION! A Medium severity vulnerability has been discovered in Salt versions 3006.3 and earlier

First published (updated )

SaltStack Salt2 vulnerabilities

First published (updated )

Git Providers can read from the wrong environment because they get the same cache directory base nam…

7.8
First published (updated )

DOS in minion return.

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SaltStack SaltATTENTION! Some medium severity vulnerabilities have been discovered in Salt versions 3006.1 and earlier

First published (updated )

SaltStack SaltBuffer Overflow

First published (updated )

SaltStack Salt1 vulnerability

First published (updated )

PAM auth fails to reject locked accounts.

8.8
First published (updated )

SaltStack SaltAttention! A critical vulnerability has been discovered in Salt versions 3004.1 and earlier

First published (updated )

SaltStack Salt4 vulnerabilities

First published (updated )

Minion authentication denial of service.

First published (updated )

Job publishes and file server replies are susceptible to replay attacks.

8.8
First published (updated )

When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…

8.8
First published (updated )

Salt Masters do not sign pillar data with the minion’s public key.

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SaltStack SaltATTENTION! Some critical vulnerabilities have been discovered in Salt versions 3004 and earlier

First published (updated )

SaltStack Salt3 vulnerabilities

First published (updated )

Race Condition

First published (updated )

A user who has control of the source, and source_hash URLs can gain full file system access as root …

7.5
First published (updated )

Command Injection, OS Command Injection

7.8
First published (updated )

SaltStack Saltsalt-api unauthenticated remote code execution

First published (updated )

SaltStack Salt10 vulnerabilities

First published (updated )

Command Injection

First published (updated )

Token can be used once after expiration

First published (updated )

Last updated 8 August 2024

First published (updated )

Code Injection

First published (updated )

Last updated 8 August 2024

First published (updated )

Path Traversal

First published (updated )

Last updated 8 August 2024

First published (updated )

Last updated 8 August 2024

First published (updated )

Last updated 8 August 2024

7.4
First published (updated )

Command Injection, OS Command Injection

7.8
First published (updated )

SaltStack SaltUPDATE 2021-FEB-25 CVE Release Time Delay

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SaltStack SaltSalt Feb 4th CVE Release Delayed

First published (updated )

SaltStack SaltActive Salt CVE Announcement - 2021-JAN-21

First published (updated )

SaltStack Salt3 vulnerabilities

First published (updated )

Last updated 8 August 2024

First published (updated )

Input Validation

First published (updated )

SaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability

First published (updated )

SaltStack SaltActive Salt CVE Announcement - 2020-OCT-30

First published (updated )

SaltStack SaltActive Salt CVE Update - CVE-2020-11651 and CVE-2020-11652

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SaltStack SaltActive Salt CVE Update for CVE-2020-11651 and CVE-2020-11652

First published (updated )

SaltStack SaltSaltStack Salt Path Traversal Vulnerability

First published (updated )

SaltStack SaltSaltStack Salt Authentication Bypass Vulnerability

First published (updated )

SaltStack SaltSalt CVE Critical Updates - 2020-APR-21

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203