2.7Low

CVE-2024-38823CVE-2024-38823 Salt Advisory

VMware SALT Published: (1 year ago)

Description

Salt's request server is vulnerable to replay attacks when not using a TLS encrypted transport.

Weakness (CWE): CWE-294

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
VMware SALT 3006.x – < 3006.12, 3007.x – < 3007.4

References and patches