USN-6849-1: Salt vulnerabilities

It was discovered that Salt incorrectly validated method calls and sanitized paths. A remote attacker could possibly use this issue to access some methods without authentication. CVE-2020-11651, CVE-2020-11652...

CVE-2024-24553

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function...

CVE-2024-24553 Bludit uses SHA1 as Password Hashing Algorithm

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function...

CVE-2024-24553

CVE-2024-24553 relates to Bludit, where password hashes are computed with SHA-1 and the salt is generated by a non-cryptographically secure function. Attackers could brute-force SHA-1 to recover plaintext passwords, per the description in multiple sources. The connected documents consistently des...

CVE-2024-24553 Bludit uses SHA1 as Password Hashing Algorithm

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function...

PT-2024-20445

Name of the Vulnerable Software and Affected Versions Bludit affected versions not specified Description The issue concerns the use of the SHA-1 hashing algorithm to compute password hashes, which allows attackers to determine cleartext passwords with brute-force attacks due to the inherent speed...

Insecure Temporary File

salt is vulnerable to Insecure Temporary File. The vulnerability is caused by insecure permissions of /tmp within state.py, which could allow an attacker on the system to read arbitrary files created by salt...

Privilege Escalation

salt is vulnerable to Privilege Escalation. The vulnerability is caused due to the dropping of group privileges by the salt master, which makes it easier for remote attackers to gain privileges...

Exploit for Improper Authentication in Elementor Website_Builder

CVE-2023-47504 POC Exploit for CVE-2023-47504. According to N...

SUSE CVE-2024-3183

A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client's session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the target principal key directly. For user...

OPENSUSE-SU-2024:11970-1 python3-salt-3004-5.1 on GA media

These are all security issues fixed in the python3-salt-3004-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13650-1 python3-salt-3006.0-7.1 on GA media

These are all security issues fixed in the python3-salt-3006.0-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12154-1 python3-salt-3004-7.1 on GA media

These are all security issues fixed in the python3-salt-3004-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13121-1 python3-salt-3006.0-2.1 on GA media

These are all security issues fixed in the python3-salt-3006.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11364-1 python3-salt-3002.2-6.1 on GA media

These are all security issues fixed in the python3-salt-3002.2-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10291-1 salt-2016.3.4-1.1 on GA media

These are all security issues fixed in the salt-2016.3.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13188-1 python3-salt-3006.0-4.1 on GA media

These are all security issues fixed in the python3-salt-3006.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13630-1 python3-salt-3006.0-6.1 on GA media

These are all security issues fixed in the python3-salt-3006.0-6.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-3183

A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the target principal key directly. For user...

DEBIAN-CVE-2024-3183

A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the target principal key directly. For user...