Skip to content
OpenAdvisories

Package · Alpine

salt

28 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.2
    CVE-2025-62349

    Salt Master authentication protocol downgrade may enable minion impersonation

    Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introd…

    Salt Project Salt salt salt Alpine PyPI
  • Medium 5.0
    CVE-2024-22231

    Syndic cache directory creation is vulnerable to a directory traversal attack

    Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

    VMware Salt Project salt salt Ubuntu Alpine PyPI
  • Medium 6.4
    CVE-2021-22004

    Improper Authentication in SaltStack Salt

    An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour…

    salt salt Alpine PyPI
  • Medium 4.4
    CVE-2021-25284

    SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod

    An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.

    salt salt salt Ubuntu Alpine PyPI
  • Medium 5.5
    CVE-2020-17490

    SaltStack Salt Allows creating certificates with weak file permissions

    The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.

    salt salt salt Ubuntu Alpine PyPI
  • Medium 6.5
    CVE-2020-11652 Exploited Public exploit EPSS 86%

    SaltStack Salt is vulnerable Arbitrary Directory Access

    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

    salt salt salt Ubuntu Alpine PyPI
    KEV Nov 3, 2021
  • Medium 5.3
    CVE-2018-15750

    SaltStack Salt Directory Traversal vulnerability in salt-api

    Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.

    salt salt salt Ubuntu Alpine PyPI