Lucene search
HistoryJun 27, 2024 - 7:15 a.m.
CVE-2024-22231
syndic cache
directory traversal
salt master
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
9.1%
Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.
Related
osv
osv
Directory creation by malicious user in saltstack
2024-06-27 09:30:39
CVE-2024-22231
2024-06-27 07:15:52
alpinelinux
alpinelinux
CVE-2024-22231
2024-06-27 07:15:52
cvelist
cvelist
veracode
veracode
Path Traversal
2024-02-06 17:59:45
github
github
Directory creation by malicious user in saltstack
2024-06-27 09:30:39
debiancve
debiancve
CVE-2024-22231
2024-06-27 07:15:52
cve
cve
CVE-2024-22231
2024-06-27 07:15:52
nessus
nessus
SUSE SLES15 Security Update : SUSE Manager Salt Bundle (SUSE-SU-2024:1518-1)
2024-05-07 00:00:00
SUSE SLES15 Security Update : salt (SUSE-SU-2024:0507-1)
2024-02-17 00:00:00
SaltStack 3000 < 3005.5 / 3006 < 3006.6 Multiple Vulnerablities
2024-02-22 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:0506-1)
2024-02-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0508-1)
2024-02-16 00:00:00
openSUSE: Security Advisory for salt (SUSE-SU-2024:0509-1)
2024-03-04 00:00:00
redos
redos
ROS-20240625-05
2024-06-25 00:00:00
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-22231