Lucene search

CVE-2023-20898

🗓️ 05 Sep 2023 00:00:00Reported by ubuntu.comType

Git Providers on Salt masters prior to 3005.2 or 3006.2 can read from wrong environment, leading to data disclosure and corruption

Reporter	Title	Published	Views	Family All 29
Vulnrichment	CVE-2023-20898	5 Sep 202310:59	–	vulnrichment
AlpineLinux	CVE-2023-20898	5 Sep 202311:15	–	alpinelinux
Cvelist	CVE-2023-20898	5 Sep 202310:59	–	cvelist
Veracode	Information Disclosure	8 Sep 202312:24	–	veracode
OSV	Salt can cause Git Providers to get wrong data	5 Sep 202312:30	–	osv
OSV	CVE-2023-20898	5 Sep 202311:15	–	osv
OSV	PYSEC-2023-169	5 Sep 202311:15	–	osv
Prion	Design/Logic Flaw	5 Sep 202311:15	–	prion
Debian CVE	CVE-2023-20898	5 Sep 202311:15	–	debiancve
Github Security Blog	Salt can cause Git Providers to get wrong data	5 Sep 202312:30	–	github

Source	Link
saltproject	www.saltproject.io/security-announcements/2023-08-10-advisory/
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-20898
launchpad	www.launchpad.net/bugs/cve/CVE-2023-20898
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-20898

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	salt	any	UNKNOWN
ubuntu	22.04	noarch	salt	any	UNKNOWN
ubuntu	14.04	noarch	salt	any	UNKNOWN
ubuntu	16.04	noarch	salt	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Sep 2023 00:00Current

7.0High risk

Vulners AI Score7.0

CVSS37.8

EPSS0.000