Filter
AND
-Infinity
0
Trending
Versions
3002
5
3003
4
3004
4
2016.11.0
3
2016.11.1
3
2016.11.2
3
2016.11.4
3
2016.11.7
3
2016.3.0
3
2016.3.7
3
0.15.0
2
0.15.1
2
0.16.0
2
0.16.2
2
0.16.3
2
0.16.4
2
0.17.0
2
2015.8.11
2
2016.11
2
2016.11.3
2
2016.3.5
2
2016.3.9
2
2017.5.0
2
2018.2.0
2
2018.3.5
2
2019.2.0
2
2019.2.6
2
3000
2
3001
2
0.10.0
1
0.10.2
1
0.10.3
1
0.10.4
1
0.10.5
1
0.11.0
1
0.12.0
1
0.13.0
1
0.14.0
1
0.6.0
1
0.7.0
1
0.8.0
1
0.8.7
1
0.8.8
1
0.8.9
1
0.9.0
1
0.9.2
1
0.9.3
1
0.9.4
1
0.9.5
1
0.9.6
1
SaltStackGit Providers can read from the wrong environment because they get the same cache directory base nam…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/saltSpecially crafted url can be created which leads to a directory traversal in the salt file server
7.7
First published (updated )
SaltStackSalt Masters do not sign pillar data with the minion’s public key.
8.8
First published (updated )
SaltStackSalt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external …
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
FedoraA user who has control of the source, and source_hash URLs can gain full file system access as root …
7.5
First published (updated )
SaltStackJob publishes and file server replies are susceptible to replay attacks.
8.8
First published (updated )
SaltStackWhen configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…
8.8
First published (updated )
SaltStackSalt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows ma…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/saltSalt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splun…
7.5
First published (updated )
SaltStackWhen using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before …
8.8
First published (updated )
SaltStackSaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability
7.3
SaltStackSaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability
7.3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStackSaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability
7.3
SaltStackSaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability
7.3
SaltStackSaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability
7.3
SaltStackSaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability
7.3
SaltStackSaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability
7.3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStackSaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability
7.3
SaltStackSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
7.3
SaltStackSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
7.3