Filter
AND

SaltStack Salt2 vulnerabilities

First published (updated )

Specially crafted url can be created which leads to a directory traversal in the salt file server

7.7
First published (updated )

Syndic cache directory creation is vulnerable to a directory traversal attack

First published (updated )

SaltStack SaltATTENTION! Some High and Medium severity vulnerabilities have been discovered in Salt versions 3006.5 and earlier

First published (updated )

SaltStack Salt1 vulnerability

First published (updated )

Salt security advisory release - 2023-OCT-27

First published (updated )

SaltStack SaltATTENTION! A Medium severity vulnerability has been discovered in Salt versions 3006.3 and earlier

First published (updated )

SaltStack Salt2 vulnerabilities

First published (updated )

Git Providers can read from the wrong environment because they get the same cache directory base nam…

7.8
First published (updated )

DOS in minion return.

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SaltStack SaltATTENTION! Some medium severity vulnerabilities have been discovered in Salt versions 3006.1 and earlier

First published (updated )

SaltStack SaltBuffer Overflow

First published (updated )

SaltStack Salt1 vulnerability

First published (updated )

PAM auth fails to reject locked accounts.

8.8
First published (updated )

SaltStack SaltAttention! A critical vulnerability has been discovered in Salt versions 3004.1 and earlier

First published (updated )

SaltStack Salt4 vulnerabilities

First published (updated )

Minion authentication denial of service.

First published (updated )

Job publishes and file server replies are susceptible to replay attacks.

8.8
First published (updated )

When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…

8.8
First published (updated )

Salt Masters do not sign pillar data with the minion’s public key.

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SaltStack SaltATTENTION! Some critical vulnerabilities have been discovered in Salt versions 3004 and earlier

First published (updated )

SaltStack Salt3 vulnerabilities

First published (updated )

Race Condition

First published (updated )

A user who has control of the source, and source_hash URLs can gain full file system access as root …

7.5
First published (updated )

Command Injection, OS Command Injection

7.8
First published (updated )

SaltStack Saltsalt-api unauthenticated remote code execution

First published (updated )

SaltStack SaltCommand Injection

First published (updated )

SaltStack SaltToken can be used once after expiration

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SaltStack SaltLast updated 8 August 2024

First published (updated )

SaltStack SaltCode Injection

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203