Skip to content
OpenAdvisories

Package · Ubuntu

salt

54 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.7
    CVE-2024-38823

    CVE-2024-38823 Salt Advisory

    Salt's request server is vulnerable to replay attacks when not using a TLS encrypted transport.

    VMware SALT salt Ubuntu
  • Low 2.7
    CVE-2024-38822

    CVE-2024-38822 Salt Advisory

    Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion.

    VMware SALT salt Ubuntu
  • Low 3.7
    CVE-2022-22935

    SaltStack Salt Improper Authentication via Man in the Middle Attack

    An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.

    salt salt salt Ubuntu Alpine PyPI
  • Low 3.3
    CVE-2015-8034

    Salt uses weak permissions on the cache data

    The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

    salt salt Ubuntu PyPI