Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6948-1
HistoryAug 08, 2024 - 12:00 a.m.

Salt vulnerabilities

2024-08-0800:00:00
ubuntu.com
10
salt vulnerabilities
ubuntu 18.04
ubuntu 16.04
esm
crafted web requests
arbitrary commands
weak file permissions
credential validation
ssl/tls certificates
directory traversal
template rendering
logging
input sanitization

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.969

Percentile

99.8%

JSON

Releases

  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • salt - Infrastructure management built on a dynamic communication bus

Details

It was discovered that Salt incorrectly handled crafted web requests.
A remote attacker could possibly use this issue to run arbitrary
commands. (CVE-2020-16846)

It was discovered that Salt incorrectly created certificates with weak
file permissions. (CVE-2020-17490)

It was discovered that Salt incorrectly handled credential validation.
A remote attacker could possibly use this issue to bypass authentication.
(CVE-2020-25592)

It was discovered that Salt incorrectly handled crafted process names.
An attacker could possibly use this issue to run arbitrary commands.
This issue only affected Ubuntu 18.04 LTS. (CVE-2020-28243)

It was discovered that Salt incorrectly handled validation of SSL/TLS
certificates. A remote attacker could possibly use this issue to spoof
a trusted entity. (CVE-2020-28972, CVE-2020-35662)

It was discovered that Salt incorrectly handled credential validation.
A remote attacker could possibly use this issue to run arbitrary code.
(CVE-2021-25281)

It was discovered that Salt incorrectly handled crafted paths. A remote
attacker could possibly use this issue to perform directory traversal.
(CVE-2021-25282)

It was discovered that Salt incorrectly handled template rendering. A
remote attacker could possibly this issue to run arbitrary code.
(CVE-2021-25283)

It was discovered that Salt incorrectly handled logging. An attacker
could possibly use this issue to discover credentials. This issue only
affected Ubuntu 18.04 LTS. (CVE-2021-25284)

It was discovered that Salt incorrectly handled crafted web requests.
A remote attacker could possibly use this issue to run arbitrary
commands. This issue only affected Ubuntu 18.04 LTS. (CVE-2021-3148)

It was discovered that Salt incorrectly handled input sanitization.
A remote attacker could possibly use this issue to run arbitrary
commands. (CVE-2021-3197)

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchsalt-common< 2017.7.4+dfsg1-1ubuntu18.04.2+esm1UNKNOWN
Ubuntu18.04noarchsalt-api< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Ubuntu18.04noarchsalt-cloud< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Ubuntu18.04noarchsalt-common< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Ubuntu18.04noarchsalt-doc< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Ubuntu18.04noarchsalt-master< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Ubuntu18.04noarchsalt-minion< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Ubuntu18.04noarchsalt-proxy< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Ubuntu18.04noarchsalt-ssh< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Ubuntu18.04noarchsalt-syndic< 2017.7.4+dfsg1-1ubuntu18.04.2UNKNOWN
Rows per page:
1-10 of 201

Related

nessus 32
osv 25
openvas 22
archlinux 2
fedora 6
freebsd 2
gentoo 3
suse 3
photon 8
debian 6
attackerkb 3
metasploit 2
packetstorm 2
zdt 2
rapid7blog 2
prion 7
cvelist 7
debiancve 8
veracode 7
nvd 7
cve 7
ubuntucve 6
redhatcve 7
nuclei 1
alpinelinux 6
github 6
trendmicroblog 1
zdi 4
checkpoint_advisories 2
githubexploit 2
cisa_kev 1
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Salt vulnerabilities (USN-6948-1)
2024-08-08 00:00:00
GLSA-202103-01 : Salt: Multiple vulnerabilities
2021-04-01 00:00:00
openSUSE Security Update : salt (openSUSE-2021-347)
2021-03-01 00:00:00
osv
osv
salt vulnerabilities
2024-08-08 19:21:44
salt - security update
2021-11-10 00:00:00
salt - security update
2021-01-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6948-1)
2024-08-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0631-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0630-1)
2021-06-09 00:00:00
archlinux
archlinux
[ASA-202102-33] salt: multiple issues
2021-02-27 00:00:00
[ASA-202011-7] salt: multiple issues
2020-11-10 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: salt-3002.5-1.fc33
2021-03-02 15:56:30
[SECURITY] Fedora 32 Update: salt-3001.6-1.fc32
2021-03-02 15:35:09
[SECURITY] Fedora 34 Update: salt-3002.5-1.fc34
2021-03-19 20:22:58
freebsd
freebsd
salt -- multiple vulnerabilities
2021-02-25 00:00:00
salt -- multiple vulnerabilities
2020-11-06 00:00:00
gentoo
gentoo
Salt: Multiple vulnerabilities
2021-03-31 00:00:00
Salt: Multiple vulnerabilities
2020-11-11 00:00:00
Salt: Multiple Vulnerabilities
2023-10-31 00:00:00
suse
suse
Security update for salt (critical)
2021-02-26 00:00:00
Security update for salt (critical)
2020-11-07 00:00:00
Security update for salt (critical)
2020-11-05 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0364
2021-02-26 00:00:00
Important Photon OS Security Update - PHSA-2021-0364
2021-02-27 00:00:00
Critical Photon OS Security Update - PHSA-2021-0047
2021-06-16 00:00:00
debian
debian
[SECURITY] [DLA 2815-1] salt security update
2021-11-10 18:08:20
[SECURITY] [DLA 2480-2] salt regression update
2022-01-03 20:17:47
[SECURITY] [DSA 5011-1] salt security update
2021-11-19 11:19:25
attackerkb
attackerkb
CVE-2021-25281
2021-02-27 00:00:00
CVE-2020-16846 — SaltStack Unauthenticated Shell Injection
2020-11-06 00:00:00
CVE-2020-25592 — SaltStack Authentication Bypass and Salt SSH Command Execution
2020-11-06 00:00:00
metasploit
metasploit
SaltStack Salt API Unauthenticated RCE through wheel_async client
2021-03-26 12:54:06
SaltStack Salt REST API Arbitrary Command Execution
2020-11-11 19:09:26
packetstorm
packetstorm
SaltStack Salt API Unauthenticated Remote Command Execution
2021-04-01 00:00:00
SaltStack Salt REST API Arbitrary Command Execution
2020-11-12 00:00:00
zdt
zdt
SaltStack Salt API Unauthenticated Remote Command Execution Exploit
2021-04-02 00:00:00
SaltStack Salt REST API Arbitrary Command Execution Exploit
2020-11-12 00:00:00
rapid7blog
rapid7blog
SaltStack Pre-Authenticated Remote Root (CVE-2020-16846 and CVE-2020-25592): What You Need to Know
2020-11-10 14:22:33
Metasploit Wrap-Up
2020-11-13 19:08:01
prion
prion
Code injection
2020-11-06 08:15:00
Sql injection
2021-02-27 05:15:00
Code injection
2021-02-27 05:15:00
cvelist
cvelist
CVE-2021-25283
2021-02-27 00:00:00
CVE-2021-25281
2021-02-27 00:00:00
CVE-2020-35662
2021-02-27 00:00:00
debiancve
debiancve
CVE-2021-25283
2021-02-27 05:15:13
CVE-2020-17490
2020-11-06 08:15:13
CVE-2021-25281
2021-02-27 05:15:13
veracode
veracode
Directory Traversal
2021-03-01 06:02:37
Server Side Template Injection
2021-03-01 07:26:06
Privilege Escalation
2021-04-22 01:43:27
nvd
nvd
CVE-2020-17490
2020-11-06 08:15:13
CVE-2020-35662
2021-02-27 05:15:13
CVE-2021-25283
2021-02-27 05:15:13
cve
cve
CVE-2021-25281
2021-02-27 05:15:13
CVE-2020-35662
2021-02-27 05:15:13
CVE-2020-17490
2020-11-06 08:15:13
ubuntucve
ubuntucve
CVE-2020-35662
2021-02-27 00:00:00
CVE-2020-17490
2020-11-06 00:00:00
CVE-2021-25281
2021-02-27 00:00:00
redhatcve
redhatcve
CVE-2020-17490
2020-11-06 17:29:13
CVE-2021-25281
2021-02-26 18:33:54
CVE-2020-35662
2021-02-26 19:02:52
nuclei
nuclei
SaltStack Salt <3002.5 - Auth Bypass
2021-02-26 09:02:30
alpinelinux
alpinelinux
CVE-2020-17490
2020-11-06 08:15:13
CVE-2020-25592
2020-11-06 08:15:13
CVE-2021-25283
2021-02-27 05:15:13
github
github
SaltStack Salt Allows creating certificates with weak file permissions
2022-05-24 17:33:17
SaltStack Salt Improper SSL Certificate Validation
2022-05-24 17:43:21
SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
2022-05-24 17:33:18
trendmicroblog
trendmicroblog
This Week in Security News: US Cyber Command Exposes New Russian Malware and REvil Ransomware Gang ‘Acquires’ KPOT Malware
2020-11-06 13:42:03
zdi
zdi
SaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability
2020-11-24 00:00:00
SaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability
2020-11-24 00:00:00
SaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability
2020-11-24 00:00:00
checkpoint_advisories
checkpoint_advisories
SaltStack Salt API SSH Client Command Injection (CVE-2020-16846)
2021-11-16 00:00:00
SaltStack Salt Method Directory Traversal (CVE-2021-25282)
2021-04-25 00:00:00
githubexploit
githubexploit
Exploit for OS Command Injection in Saltstack Salt
2021-10-14 10:09:48
Exploit for Command Injection in Saltstack Salt
2020-12-22 19:35:15
cisa_kev
cisa_kev
SaltStack Salt Shell Injection Vulnerability
2021-11-03 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.969

Percentile

99.8%

JSON
Related for USN-6948-1
nessus32osv25openvas22archlinux2fedora6freebsd2gentoo3suse3photon8debian6attackerkb3metasploit2packetstorm2zdt2rapid7blog2prion7cvelist7debiancve8veracode7nvd7cve7ubuntucve6redhatcve7nuclei1alpinelinux6github6trendmicroblog1zdi4checkpoint_advisories2githubexploit2cisa_kev1