Filter
Versions
2016.11.4
15
2016.11.7
15
2016.3.0
15
2016.3.7
15
3002
15
2019.2.0
14
2015.8.11
13
2016.3.5
13
2017.5.0
13
2018.2.0
13
3001
13
3000
12
2016.3.9
10
2018.3.5
10
2019.2.6
10
2016.11.0
8
0.17.0
6
3003
6
2016.11.1
5
2016.11.2
5
3004
5
0.15.0
4
0.15.1
4
0.16.0
4
0.16.2
4
0.16.3
4
0.16.4
4
2015.8.2
3
2016.11
3
2016.11.3
3
2016.11.6
3
2017.7.0
3
2017.7.5
3
3000.0
3
0.11.0
2
0.12.0
2
0.13.0
2
0.14.0
2
2014.7.3
2
2015.8.0
2
2015.8.1
2
2015.8.12
2
2015.8.3
2
2016.11.1-rc1
2
2016.11.1-rc2
2
2016.11.5
2
2016.3.1
2
2016.3.2
2
2016.3.3
2
2016.3.4
2
2017.7.0-rc1
2
2017.7.1
2
2018.3.0
2
3006.0
2
0.10.0
1
0.10.2
1
0.10.3
1
0.10.4
1
0.10.5
1
0.6.0
1
0.7.0
1
0.8.0
1
0.8.7
1
0.8.8
1
0.8.9
1
0.9.0
1
0.9.2
1
0.9.3
1
0.9.4
1
0.9.5
1
0.9.6
1
0.9.7
1
0.9.8
1
0.9.9
1
2014.1.9
1
2014.7.5
1
2015.5.9
1
2015.8.10
1
2015.8.4
1
2015.8.5
1
2015.8.7
1
2016.11.0-rc1
1
2016.11.0-rc2
1
2016.9
1
3002.6
1
SaltStack SaltSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
First published (updated )
SaltStack SaltSaltStack Salt Path Traversal Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/saltSalt security advisory release - 2023-OCT-27
6.7
First published (updated )
SaltStack SaltThe salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privilege…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/saltSpecially crafted url can be created which leads to a directory traversal in the salt file server
7.7
First published (updated )
pip/saltSyndic cache directory creation is vulnerable to a directory traversal attack
First published (updated )
SaltStack SaltPAM auth fails to reject locked accounts.
8.8
First published (updated )
SaltStack SaltIn SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
9.8
First published (updated )
SaltStack SaltSalt Masters do not sign pillar data with the minion’s public key.
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSaltStack Salt Authentication Bypass Vulnerability
First published (updated )
SaltStack SaltSalt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltUnspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vect…
10
First published (updated )
SaltStack SaltSalt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external …
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltGit Providers can read from the wrong environment because they get the same cache directory base nam…
7.8
First published (updated )
Fedoraproject FedoraCommand Injection, OS Command Injection
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.