853 matches found
SaltStack Salt <3002.5 - Auth Bypass
SaltStack Salt before 3002.5 does not honor eauth credentials for the wheelasync client, allowing attackers to remotely run any wheel modules on the master. id: CVE-2021-25281 info: name: SaltStack Salt 3002.5 - Auth Bypass author: madrobot severity: critical description: SaltStack Salt before...
SaltStack <=3002 - Shell Injection
SaltStack Salt through 3002 allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt-API using the SSH client. id: CVE-2020-16846 info: name: SaltStack =3003 to mitigate this vulnerability. reference: -...
VulnCheck KEV: CVE-2021-25281
An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can remotely run any wheel modules on the master...
CVE-2021-33226
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file. NOTE: this is disputed by third parties because an attacker cannot influence the eval input...
SaltStack Salt 安全漏洞
SaltStack Salt is a set of open-source tools developed by SaltStack Corporation for managing infrastructure. This tool offers features such as configuration management and remote execution. There is a security vulnerability in SaltStack Salt, which stems from a degradation of the authentication...
EUVD-2013-0039
Malware in sbrugna...
EUVD-2017-0113
Malware in sbrugna...
EUVD-2013-0034
Malware in sbrugna...
EUVD-2017-0120
Malware in sbrugna...
EUVD-2017-0119
Malware in sbrugna...
EUVD-2018-0135
Malware in sbrugna...
EUVD-2018-0133
Malware in sbrugna...
EUVD-2017-0122
Malware in sbrugna...
EUVD-2013-0035
Malware in sbrugna...
EUVD-2019-0127
Malware in sbrugna...
EUVD-2017-0114
Malware in sbrugna...
EUVD-2014-0103
Malware in sbrugna...
EUVD-2017-0126
Malware in sbrugna...
EUVD-2020-0174
Malware in sbrugna...
EUVD-2018-0134
Malware in sbrugna...