Filters
Versions
3002
5
3003
4
3004
4
2016.11.0
3
2016.11.1
3
2016.11.2
3
2016.11.4
3
2016.11.7
3
2016.3.0
3
2016.3.7
3
0.15.0
2
0.15.1
2
0.16.0
2
0.16.2
2
0.16.3
2
0.16.4
2
0.17.0
2
2015.8.11
2
2016.11
2
2016.11.3
2
2016.3.5
2
2016.3.9
2
2017.5.0
2
2018.2.0
2
2018.3.5
2
2019.2.0
2
2019.2.6
2
3000
2
3001
2
0.10.0
1
0.10.2
1
0.10.3
1
0.10.4
1
0.10.5
1
0.11.0
1
0.12.0
1
0.13.0
1
0.14.0
1
0.6.0
1
0.7.0
1
0.8.0
1
0.8.7
1
0.8.8
1
0.8.9
1
0.9.0
1
0.9.2
1
0.9.3
1
0.9.4
1
0.9.5
1
0.9.6
1
0.9.7
1
0.9.8
1
0.9.9
1
2014.1.9
1
2014.7.5
1
2015.8.0
1
2015.8.1
1
2015.8.12
1
2015.8.2
1
2015.8.3
1
2016.11.0-rc1
1
2016.11.0-rc2
1
2016.11.1-rc1
1
2016.11.1-rc2
1
2016.11.5
1
2016.11.6
1
2016.3.1
1
2016.3.2
1
2016.3.3
1
2016.3.4
1
2016.9
1
2017.7.0
1
2017.7.0-rc1
1
2017.7.1
1
3002.6
1
3006.0
1
pip/saltSpecially crafted url can be created which leads to a directory traversal in the salt file server
7.7
First published (updated )
SaltStack SaltGit Providers can read from the wrong environment because they get the same cache directory base nam…
7.8
First published (updated )
SaltStack SaltPAM auth fails to reject locked accounts.
8.8
First published (updated )
SaltStack SaltJob publishes and file server replies are susceptible to replay attacks.
8.8
First published (updated )
SaltStack SaltWhen configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSalt Masters do not sign pillar data with the minion’s public key.
8.8
First published (updated )
Fedoraproject FedoraA user who has control of the source, and source_hash URLs can gain full file system access as root …
7.5
First published (updated )
Fedoraproject FedoraCommand Injection, OS Command Injection
7.8
First published (updated )
SaltStack SaltCommand Injection, OS Command Injection
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltWhen using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before …
8.8
First published (updated )
SaltStack SaltSalt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows ma…
8.1
First published (updated )
SaltStack SaltSalt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splun…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSalt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external …
8.8
First published (updated )
SaltStack SaltSaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability
7.3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability
7.3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
7.3