Lucene search
K

Authentication Bypass

🗓️ 31 Mar 2022 07:00:36Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 5 Views

Salt is vulnerable to authentication bypass via the validate_tgt function when using syndics.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
AlpineLinux
CVE-2022-22941
29 Mar 202200:00
alpinelinux
Circl
CVE-2022-22941
29 Mar 202220:11
circl
CNNVD
SaltStack Salt 安全漏洞
29 Mar 202200:00
cnnvd
CVE
CVE-2022-22941
29 Mar 202200:00
cve
Cvelist
CVE-2022-22941
29 Mar 202200:00
cvelist
Debian CVE
CVE-2022-22941
29 Mar 202200:00
debiancve
Tenable Nessus
GLSA-202310-22 : Salt: Multiple Vulnerabilities
31 Oct 202300:00
nessus
Tenable Nessus
openSUSE 15 Security Update : salt (openSUSE-SU-2022:1059-1)
1 Apr 202200:00
nessus
Tenable Nessus
SaltStack 3000 < 3002.8 / 3003 < 3003.4 / 3004 < 3004.1 Multiple Vulnerabilities
5 Apr 202200:00
nessus
Tenable Nessus
SUSE SLES12 Security Update : salt (SUSE-SU-2022:1051-1)
31 Mar 202200:00
nessus
Rows per page
Vulners
Node
saltstacksaltMatch3003.3-r0python
AND
saltstacksaltMatch3000.3-r0python
AND
saltstacksaltMatch3004-r2python
AND
saltstacksaltMatch3002.2-r0python
AND
saltstacksaltMatch3003.1-r0python
AND
saltstacksaltMatch3000.2-r0python
AND
saltstacksaltMatch3003.2-r0python
AND
saltstacksaltMatch3002.6-r0python
AND
saltstacksaltMatch3004-r0python
AND
saltstacksaltMatch3003-r0python
AND
saltstacksaltMatch3003-r1python
AND
saltstacksaltMatch3000.1-r2python
AND
saltstacksaltMatch3002.5-r0python
AND
saltstacksaltMatch3000.1-r1python
AND
saltstacksaltMatch3004-r1python
AND
saltstacksaltMatch3000.1-r0python
AND
saltstacksaltMatch2019.2.3-r0python
AND
OR
saltstacksaltRange3004rc13004python
OR
saltstacksaltRange0.10.43002.7python
OR
saltstacksaltRange3003rc13003.3python

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Aug 2024 17:41Current
6.9Medium risk
Vulners AI Score6.9
CVSS 26
CVSS 3.18.8
EPSS0.00016
5