2422 matches found
CVE-2024-38823
CVE-2024-38823: Salt’s request server is vulnerable to replay attacks when not using TLS. The initial description confirms the vulnerability and CVSS v3.1 base score of 2.7 (LOW) with network attack vector, requiring high privileges and no user interaction. Connected documents (SUSE advisories) i...
CVE-2024-38822
CVE-2024-38822 concerns Salt (Salt Master/Minion interaction): multiple methods in the Salt master skip minion token validation, enabling a misbehaving minion to impersonate another. Evidence from connected advisories shows patches fixing Minion token validation and related Salt issues (e.g., SUS...
CVE-2024-38822 CVE-2024-38822 Salt Advisory
Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion...
CVE-2024-38822 CVE-2024-38822 Salt Advisory
Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from not properly authenticating the caller, which could lead to an authentication bypass...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from the use of unvalidated input to create paths in the findfile method of the GitFS class, which could lead to...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from multiple methods of skipping minion token validation, which could lead to a malicious minion impersonating...
PT-2025-25386 · Salt +1 · Salt +1
Name of the Vulnerable Software and Affected Versions: Salt affected versions not specified Description: The issue allows a misbehaving minion to impersonate another minion due to the salt master skipping minion token validation in multiple methods. Recommendations: At the moment, there is no...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from a specially crafted git URL that could trigger the master process to execute arbitrary commands...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from an event bus authorization bypass that could lead an attacker to execute jobs on other minions...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration and remote execution application from the Salt project. Salt has a security vulnerability that stems from vulnerability to replay attacks when TLS encrypted transmissions are not used...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from the VirtKey class creating paths using unvalidated input, which could lead to file content overwriting...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from the failure to clean up the input value jid in the main pubret method, which could lead to a denial of servi...
PT-2025-25387 · Salt +1 · Salt +1
Name of the Vulnerable Software and Affected Versions: Salt affected versions not specified Description: The issue concerns Salt's request server being vulnerable to replay attacks when not using a TLS encrypted transport. Recommendations: At the moment, there is no information about a newer...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from a directory traversal attack in minion file cache creation, which could result in writing or overwriting fil...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from an authorized minion that can inject arbitrary events into the main event bus...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from a directory traversal that could result in arbitrary files being written to the main cache directory...
CVE-2024-13951
One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...
CVE-2024-36066
The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication the...