Salt Security Vulnerabilities and Issues — Salt CVE List

Lucene search

SaltstackSalt

3 matches found

cve•added 2017/04/25 5:59 p.m.•63 views

CVE-2017-8109

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients).

7.8CVSS7.4AI score0.00047EPSS

cve•added 2017/04/13 2:59 p.m.•55 views

CVE-2015-1838

modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

5.3CVSS5.1AI score0.00069EPSS

cve•added 2017/04/13 2:59 p.m.•46 views

CVE-2015-1839

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

5.3CVSS5.1AI score0.00082EPSS