SaltStack
by Saltstack
Source repositories
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-16846 | Cri | 0.80 | 9.8 | 1.00 | KEV | Nov 6, 2020 | An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. | |
| CVE-2021-33226 | Cri | 0.64 | 9.8 | 0.02 | Feb 17, 2023 | Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input | ||
| CVE-2020-25592 | Cri | 0.64 | 9.8 | 0.58 | Nov 6, 2020 | In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH. | ||
| CVE-2021-31607 | Hig | 0.51 | 7.8 | 0.06 | Apr 23, 2021 | In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the… | ||
| CVE-2013-2228 | Hig | 0.46 | 8.1 | 0.02 | Dec 3, 2019 | SaltStack RSA Key Generation allows remote users to decrypt communications | ||
| CVE-2020-17490 | Med | 0.36 | 5.5 | 0.00 | Nov 6, 2020 | The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions. |
- risk 0.80cvss 9.8epss 1.00
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
- risk 0.64cvss 9.8epss 0.02
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input
- risk 0.64cvss 9.8epss 0.58
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
- risk 0.51cvss 7.8epss 0.06
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the…
- risk 0.46cvss 8.1epss 0.02
SaltStack RSA Key Generation allows remote users to decrypt communications
- risk 0.36cvss 5.5epss 0.00
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.