276 matches found
PT-2019-20137
Name of the Vulnerable Software and Affected Versions SaltStack Salt versions 2018.3 through 2018.3.3 SaltStack Salt version 2019.2 Description The issue allows an attacker to escalate privileges on a MySQL server deployed by a cloud provider, leading to remote code execution RCE. This is achieve...
CVE-2018-15750
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server...
SaltStack Salt Directory Traversal Vulnerability (CNVD-2018-21848)
SaltStack Salt aka SaltStack is a set of open source tools for managing infrastructure from SaltStack, Inc. in the United States. The tool provides configuration management, remote execution and other functions , able to manage tens of thousands of servers , with the ability to quickly complete t...
CVE-2018-15750
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server...
CVE-2018-15750
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server...
CVE-2018-15750
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server...
CVE-2018-15751
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-apinetapi...
CVE-2018-15750: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server...
CVE-2018-15751: Improper Authentication
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-apinetapi...
CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...
CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...
CVE-2017-7893: Undefined Security Weakness
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...
PT-2018-3609
Name of the Vulnerable Software and Affected Versions SaltStack Salt versions 2016.11.x through 2016.11.10 SaltStack Salt versions 2017.7.x through 2017.7.8 SaltStack Salt versions 2018.3.x through 2018.3.3 Description The issue is related to a Directory Traversal vulnerability in the salt-api...
PT-2018-2893
Name of the Vulnerable Software and Affected Versions SaltStack Salt versions 2016.11.x through 2016.11.10 SaltStack Salt versions 2017.7.x through 2017.7.8 SaltStack Salt versions 2018.3.x through 2018.3.3 Description The issue is related to weaknesses in the authentication procedure of SaltStac...
SaltStack Salt Directory Traversal Vulnerability (CNVD-2017-35509)
SaltStack Salt aka SaltStack is a set of open source tools for managing infrastructure from SaltStack, Inc. in the United States. The tool provides configuration management, remote execution and other functions , able to manage tens of thousands of servers , with the ability to quickly complete t...
CVE-2017-14695
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an...
Directory traversal
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an...
CVE-2017-14695
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an...
CVE-2017-14695
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an...
