Filter
-Infinity
0
Trending
Versions
2016.11.4
15
2016.11.7
15
2016.3.0
15
2016.3.7
15
3002
15
2019.2.0
14
2015.8.11
13
2016.3.5
13
2017.5.0
13
2018.2.0
13
3001
13
3000
12
2016.3.9
10
2018.3.5
10
2019.2.6
10
2016.11.0
8
0.17.0
6
3003
6
2016.11.1
5
2016.11.2
5
3004
5
0.15.0
4
0.15.1
4
0.16.0
4
0.16.2
4
0.16.3
4
0.16.4
4
2015.8.2
3
2016.11
3
2016.11.3
3
2016.11.6
3
2017.7.0
3
2017.7.5
3
3000.0
3
0.11.0
2
0.12.0
2
0.13.0
2
0.14.0
2
2014.7.3
2
2015.8.0
2
2015.8.1
2
2015.8.12
2
2015.8.3
2
2016.11.1-rc1
2
2016.11.1-rc2
2
2016.11.5
2
2016.3.1
2
2016.3.2
2
2016.3.3
2
2016.3.4
2
SaltStackThe salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privilege…
10
First published (updated )
pip/saltUnspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vect…
10
First published (updated )
SaltStackSaltStack Salt Authentication Bypass Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStacksalt-api unauthenticated remote code execution
9.8
First published (updated )
SaltStackSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/saltIn SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/saltSalt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related t…
9.1
First published (updated )
SaltStackSalt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.…
First published (updated )
SaltStackSalt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external …
8.8
First published (updated )
SaltStackWhen using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before …
8.8
First published (updated )
SaltStackJob publishes and file server replies are susceptible to replay attacks.
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStackWhen configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…
8.8
First published (updated )
SaltStackSalt Masters do not sign pillar data with the minion’s public key.
8.8
First published (updated )
SaltStackSalt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows ma…
8.1
First published (updated )
SaltStackGit Providers can read from the wrong environment because they get the same cache directory base nam…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.