configuration management systems Replication Attack

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of authentication checks when using transports that are not encrypted according to the TLS protocol. Exploiting this vulnerability allows a malicious actor to perform...

configuration management system recv_file Remote Execution Privilege Escalation

The vulnerability of the recvfile method in the configuration management system and remote execution of Salt operations is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...

VirtKey Configuration Management Remote Execution

The vulnerability of the VirtKey function in the configuration management system and the ability to perform remote Salt operations are related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to circumvent established security restrictions...

Salt Configuration Management Find File Manipulation

The vulnerability of the configuration management system and remote execution of operations related to Salt is related to incorrect validation of input data for the variable tgtenv. Exploiting this vulnerability could allow an attacker to manipulate data structures...

Salt Remote Execution Tornado Unauthenticated Access

The vulnerability of the configuration management system and the remote execution of operations, such as Salt, is related to the use of open redirection in the Python Tornado web framework. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

TLS Module Permission Access Confidential Data

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to gain access to confidential data...