CVE-2024-22231

2024-06-2707:15:52

Debian Security Bug Tracker

security-tracker.debian.org

syndic

cache directory

vulnerability

unix

5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

OSVersionArchitecturePackageVersionFilename
Debian11allsalt<= 3002.6+dfsg1-4+deb11u1salt_3002.6+dfsg1-4+deb11u1_all.deb
Debian10allsalt<= 2018.3.4+dfsg1-6+deb10u3salt_2018.3.4+dfsg1-6+deb10u3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	all	salt	<= 3002.6+dfsg1-4+deb11u1	salt_3002.6+dfsg1-4+deb11u1_all.deb
Debian	10	all	salt	<= 2018.3.4+dfsg1-6+deb10u3	salt_2018.3.4+dfsg1-6+deb10u3_all.deb