Skip to content
OpenAdvisories

Package · PyPI

salt

69 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2022-22935

    SaltStack Salt Improper Authentication via Man in the Middle Attack

    An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.

    salt salt salt Ubuntu Alpine PyPI
  • Low 3.3
    CVE-2015-8034

    Salt uses weak permissions on the cache data

    The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

    salt salt Ubuntu PyPI