Salt Security Vulnerabilities and Issues — Salt CVE List

Lucene search

SaltstackSalt

3 matches found

CVE•added 2021/02/27 5:15 a.m.•264 views

CVE-2021-25284

An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.

4.4CVSS6.5AI score0.00017EPSS

CVE•added 2022/03/29 5:15 p.m.•118 views

CVE-2022-22935

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.

4.3CVSS5.7AI score0.00059EPSS

CVE•added 2013/11/05 6:55 p.m.•54 views

CVE-2013-4439

Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.

4.9CVSS6.2AI score0.00193EPSS