Lucene search
+L

6 matches found

BDU FSTEC
BDU FSTEC
added 2025/09/08 12:00 a.m.14 views

The vulnerability of the find_file method in configuration management systems and remote execution of Salt operations allows a perpetrator to manipulate data structures.

The vulnerability of the configuration management system and remote execution of operations related to Salt is related to incorrect validation of input data for the variable tgtenv. Exploiting this vulnerability could allow an attacker to manipulate data structures...

6.3CVSS6AI score0.00163EPSS
SaveExploits0References13Affected Software13
BDU FSTEC
BDU FSTEC
added 2025/09/08 12:00 a.m.15 views

The vulnerability of the VirtKey function in the configuration management system and the remote execution of Salt operations allows a perpetrator to circumvent established security restrictions.

The vulnerability of the VirtKey function in the configuration management system and the ability to perform remote Salt operations are related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to circumvent established security restrictions...

5.6CVSS5.8AI score0.00183EPSS
SaveExploits0References13Affected Software13
BDU FSTEC
BDU FSTEC
added 2025/09/08 12:00 a.m.13 views

The vulnerability of configuration management systems and remote execution of operations, related to insufficient verification of data authenticity, allows attackers to carry out replication attacks.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of authentication checks when using transports that are not encrypted according to the TLS protocol. Exploiting this vulnerability allows a malicious actor to perform...

3.3CVSS5.9AI score0.00258EPSS
SaveExploits0References14Affected Software13
BDU FSTEC
BDU FSTEC
added 2025/09/08 12:00 a.m.14 views

The vulnerability of the recv_file method in the configuration management system and remote execution of Salt operations allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the recvfile method in the configuration management system and remote execution of Salt operations is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...

7.8CVSS6AI score0.01011EPSS
SaveExploits0References13Affected Software13
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:00 a.m.11 views

The vulnerability lies in the system for managing configuration files and remote execution of operations called Salt. The Python web framework Tornado allows attackers to gain unauthorized access to protected information.

The vulnerability of the configuration management system and the remote execution of operations, such as Salt, is related to the use of open redirection in the Python Tornado web framework. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

6.4CVSS6.5AI score0.01142EPSS
SaveExploits0References11Affected Software22
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:00 a.m.13 views

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations, related to the improper assignment of permissions for critical resources, allows attackers to gain access to confidential data.

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to gain access to confidential data...

5.5CVSS7.1AI score0.00416EPSS
SaveExploits0References10Affected Software6
Rows per page
Query Builder