Skip to content
OpenAdvisories

Vendor

SaltStack

2 known vulnerabilities.

Products

SaltStack 1 Salt 1 Salt <= v.3003 0 Salt <= 2016.9_3002.6 0 Salt < 3004.1 0 Salt < 3003.4 0 Salt < 3002.8 0 Salt < 3002.9 0 Salt < 3003.5 0 Salt < 3004.2. 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-1010259

    SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function

    SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL module for Salt. The…

    SaltStack Salt salt PyPI