Filter
AND
Versions
2016.11.4
15
2016.11.7
15
2016.3.0
15
2016.3.7
15
3002
15
2019.2.0
14
2015.8.11
13
2016.3.5
13
2017.5.0
13
2018.2.0
13
3001
13
3000
12
2016.3.9
10
2018.3.5
10
2019.2.6
10
2016.11.0
8
0.17.0
6
3003
6
2016.11.1
5
2016.11.2
5
3004
5
0.15.0
4
0.15.1
4
0.16.0
4
0.16.2
4
0.16.3
4
0.16.4
4
2015.8.2
3
2016.11
3
2016.11.3
3
2016.11.6
3
2017.7.0
3
2017.7.5
3
3000.0
3
0.11.0
2
0.12.0
2
0.13.0
2
0.14.0
2
2014.7.3
2
2015.8.0
2
2015.8.1
2
2015.8.12
2
2015.8.3
2
2016.11.1-rc1
2
2016.11.1-rc2
2
2016.11.5
2
2016.3.1
2
2016.3.2
2
2016.3.3
2
2016.3.4
2
2017.7.0-rc1
2
2017.7.1
2
2018.3.0
2
3006.0
2
0.10.0
1
0.10.2
1
0.10.3
1
0.10.4
1
0.10.5
1
0.6.0
1
0.7.0
1
0.8.0
1
0.8.7
1
0.8.8
1
0.8.9
1
0.9.0
1
0.9.2
1
0.9.3
1
0.9.4
1
0.9.5
1
0.9.6
1
0.9.7
1
0.9.8
1
0.9.9
1
2014.1.9
1
2014.7.5
1
2015.5.9
1
2015.8.10
1
2015.8.4
1
2015.8.5
1
2015.8.7
1
2016.11.0-rc1
1
2016.11.0-rc2
1
2016.9
1
3002.6
1
SaltStack SaltThe salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privilege…
10
First published (updated )
SaltStack SaltUnspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vect…
10
First published (updated )
SaltStack SaltSaltStack Salt Authentication Bypass Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack Saltsalt-api unauthenticated remote code execution
9.8
First published (updated )
SaltStack SaltSaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability
First published (updated )
SaltStack SaltIn SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltToken can be used once after expiration
9.1
First published (updated )
SaltStack SaltSalt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related t…
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltSalt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.…
First published (updated )
SaltStack SaltSalt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external …
8.8
First published (updated )
SaltStack SaltWhen using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before …
8.8
First published (updated )
SaltStack SaltJob publishes and file server replies are susceptible to replay attacks.
8.8
First published (updated )
SaltStack SaltWhen configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SaltStack SaltPAM auth fails to reject locked accounts.
8.8
First published (updated )
SaltStack SaltSalt Masters do not sign pillar data with the minion’s public key.
8.8
First published (updated )
SaltStack SaltSalt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows ma…
8.1
First published (updated )
SaltStack SaltGit Providers can read from the wrong environment because they get the same cache directory base nam…
7.8
First published (updated )
Fedoraproject FedoraCommand Injection, OS Command Injection
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.