Lucene search
K

7 matches found

Tenable Nessus
Tenable Nessus
added 2023/09/29 12:0 a.m.30 views

SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2023:3865-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3865-1 advisory. Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers c...

7.8CVSS6.9AI score0.01033EPSS
Exploits0References17
NVD
NVD
added 2023/09/05 11:15 a.m.15 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.7AI score0.00286EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2023/09/05 11:15 a.m.19 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00286EPSS
Exploits0
OSV
OSV
added 2023/09/05 11:15 a.m.23 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.6AI score
Exploits0References2
CVE
CVE
added 2023/09/05 10:59 a.m.372 views

CVE-2023-20898

CVE-2023-20898 affects SaltStack Salt masters prior to 3005.2 or 3006.2. The issue arises when Git Providers with different environments read from the same cache directory base name, allowing garbage or incorrect data to be read, which can lead to data disclosure, wrongful executions, data corrup...

7.8CVSS5.7AI score0.00286EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/05 10:59 a.m.17 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS6.8AI score0.00286EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/09/05 10:59 a.m.32 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS7.8AI score0.00286EPSS
Exploits0References2
Rows per page
Query Builder