USN-4459-1: Salt vulnerabilities

It was discovered that Salt allows remote attackers to determine which files exist on the server. An attacker could use that to extract sensitive information. CVE-2018-15750 It was discovered that Salt has a vulnerability that allows an user to bypass authentication. An attacker could use that to...

OPENSUSE-SU-2020:0564-1 Security update for salt

This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595 This update was imported from the SUSE:SLE-15-SP1:Update update project...

SaltStack Salt Master Server Root Key Disclosure

This module exploits unauthenticated access to the prepauthinfo method in the SaltStack Salt master's ZeroMQ request server, for versions 2019.2.3 and earlier and 3000.1 and earlier, to disclose the root key used to authenticate administrative commands to the master. VMware vRealize Operations...

SUSE-SU-2020:1151-1 Security update for salt

This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595...

SUSE-SU-2020:1150-1 Security update for salt

This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595...

SUSE-SU-2020:1147-1 Security update for salt

This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595...

UBUNTU-CVE-2014-3563

Multiple unspecified vulnerabilities in Salt aka SaltStack before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in 1 seed.py, 2 salt-ssh, or 3 salt-cloud...