Filter
AND
pip/saltSpecially crafted url can be created which leads to a directory traversal in the salt file server
7.7
First published (updated )
SaltStack SaltGit Providers can read from the wrong environment because they get the same cache directory base nam…
7.8
First published (updated )
SaltStack SaltPAM auth fails to reject locked accounts.
8.8
First published (updated )
SaltStack SaltJob publishes and file server replies are susceptible to replay attacks.
8.8
First published (updated )
SaltStack SaltWhen configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSalt Masters do not sign pillar data with the minion’s public key.
8.8
First published (updated )
Fedoraproject FedoraA user who has control of the source, and source_hash URLs can gain full file system access as root …
7.5
First published (updated )
Fedoraproject FedoraCommand Injection, OS Command Injection
7.8
First published (updated )
SaltStack SaltCommand Injection, OS Command Injection
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Saltstack SaltstackSaltStack RSA Key Generation allows remote users to decrypt communications
8.1
First published (updated )
SaltStack SaltWhen using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before …
8.8
First published (updated )
SaltStack SaltSalt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows ma…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSalt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splun…
7.5
First published (updated )
SaltStack SaltSalt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external …
8.8
First published (updated )
SaltStack SaltSaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability
7.3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability
7.3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
7.3
SaltStack SaltSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
7.3