Lucene search
+L

5 matches found

osv_pysec
osv_pysec
•added 2026/07/07 4:03 p.m.•33 views

PYSEC-2026-1902 Salt Authentication Protocol Version Downgrade Allows Minion Impersonation

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues...

7.5CVSS6.7AI score0.00463EPSS
SaveExploits0References8
PyPA
PyPA
•added 2026/07/07 4:03 p.m.•47 views

Salt Authentication Protocol Version Downgrade Allows Minion Impersonation

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues...

7.5CVSS6.7AI score0.00463EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
•added 2026/01/30 9:30 p.m.•36 views

Salt Authentication Protocol Version Downgrade Allows Minion Impersonation

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues...

7.5CVSS6.7AI score0.00463EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/01/30 9:30 p.m.•20 views

GHSA-VCF3-26XF-FW4M Salt Authentication Protocol Version Downgrade Allows Minion Impersonation

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues...

7.5CVSS6.7AI score0.00463EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/11/28 12:00 a.m.•55 views

PT-2026-5435

Name of the Vulnerable Software and Affected Versions Salt affected versions not specified Description Salt is susceptible to an authentication protocol version downgrade. A malicious minion can exploit this to bypass newer authentication and security features by utilizing an older request payloa...

8CVSS6.6AI score0.00463EPSS
SaveExploits0References134
Rows per page
Query Builder