CVE-2024-22231 Syndic cache directory creation is vulnerable to a directory traversal attack

2024-06-2706:51:44

vmware

github.com

cve-2024-22231

syndic cache

directory traversal

salt project

salt master

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

CNA Affected

[
  {
    "vendor": "VMware",
    "product": "Salt Project",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3005.5, 3006.6",
        "versionType": "3005.5, 3006.6"
      }
    ],
    "packageName": "Saltproject",
    "defaultStatus": "unaffected"
  }
]