Lucene search

K
redosRedosROS-20240625-05
HistoryJun 25, 2024 - 12:00 a.m.

ROS-20240625-05

2024-06-2500:00:00
redos.red-soft.ru
3
salt
vulnerability
configuration management
remote execution
directory traversal
remote code execution
information access
unix

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

A vulnerability in Salt’s configuration management and remote execution system is related to the
catalog traversal. Exploitation of the vulnerability could allow an attacker acting remotely,
execute arbitrary code

A vulnerability in the Salt configuration management and remote Salt operations execution system is related to the creation of
URLs, leading to directory traversal on the server. Exploitation of the vulnerability could allow
a remote attacker to gain access to sensitive information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64salt<= 3006.8-1UNKNOWN

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%