Lucene search

K
osvGoogleOSV:GHSA-PMJ6-9F8C-8G2M
HistoryMay 24, 2022 - 5:43 p.m.

Saltstack Salt Unauthenticated Arbitrary Code Execution

2022-05-2417:43:35
Google
osv.dev
4

0.0004 Low

EPSS

Percentile

14.4%

A Incorrect Implementation of Authentication Algorithm vulnerability in of SUSE SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.

0.0004 Low

EPSS

Percentile

14.4%