9.6Critical
CVE-2024-38824 salt advisory
VMware SALT
Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory.
1.0%EPSS
saltstack vulnerabilities (CVE)
CVE records published for saltstack, newest first. Follow to get an email when a new one appears.
9.8Critical
CVE-2020-16846
KEV
SaltStack Salt Shell Injection Vulnerability
saltstack salt; debian debian linux; fedoraproject fedora; opensuse leap
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
100%EPSS
6.5Medium
CVE-2020-11652
KEV
SaltStack Salt Path Traversal Vulnerability
saltstack salt; opensuse leap; debian debian linux; canonical ubuntu linux
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
86%EPSS
9.8Critical
CVE-2020-11651
KEV
SaltStack Salt Authentication Bypass Vulnerability
saltstack salt; opensuse leap; debian debian linux; canonical ubuntu linux
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be u…
97%EPSS