SaltStack

Records56All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

SaltStack records in CISA KEV

TI-2020-09349 SaltStack Salt Authentication Bypass Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-09350 SaltStack Salt Path Traversal Vulnerability CRITICAL 86KEV 2021-11-03 TI-2020-12851 SaltStack Salt Shell Injection Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Salt 52 records CRITICAL Salt 2015 2 records MEDIUM Salt 2018 1 record MEDIUM Salt 2019 1 record MEDIUM Saltstack 1 record LOW

Records

56 records

TI-2020-12851 CVE-2020-16846 · GHSA-qr38-h96j-2j3w

An issue was discovered in SaltStack Salt through 3002.

CRITICAL 100KEV

An issue was discovered in SaltStack Salt through 3002.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99585 Published 2020-11-06 Partial fix · 2015.8.13, 2016.3.8 +7 CWE-78

TI-2020-09349 CVE-2020-11651 · GHSA-pjhf-vpx3-33r3

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

CRITICAL 100KEV

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96614 Published 2020-04-30 Partial fix · 2019.2.4, 3000.2 CWE-20

TI-2021-07530 CVE-2021-25281 · GHSA-xxw3-765m-f37p

An issue was discovered in through SaltStack Salt before 3002.5.

CRITICAL 87

An issue was discovered in through SaltStack Salt before 3002.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.72945 Published 2021-02-27 Partial fix · 2015.8.13, 2016.11.5 +6 CWE-287

TI-2020-09350 CVE-2020-11652 · GHSA-vp49-2g4r-m3x3

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

CRITICAL 86KEV

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.86446 Published 2020-04-30 Partial fix · 2019.2.4, 3000.2 CWE-22

TI-2021-07531 CVE-2021-25282 · GHSA-76x4-x3p6-rpr9

An issue was discovered in through SaltStack Salt before 3002.5.

HIGH 83

An issue was discovered in through SaltStack Salt before 3002.5.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.9263 Published 2021-02-27 Partial fix · 2015.8.13, 2016.11.5 +6 CWE-22

TI-2021-12769 CVE-2021-33226 · GHSA-3cjm-9wq5-p7gj

Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute…

HIGH 82

Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01642 Published 2023-02-17 No fix listed CWE-120

TI-2021-02271 CVE-2021-3197 · GHSA-8rp6-x3r7-5qw3

An issue was discovered in SaltStack Salt before 3002.5.

HIGH 80

An issue was discovered in SaltStack Salt before 3002.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.71684 Published 2021-02-27 Partial fix · 2015.8.13, 2016.11.5 +6 CWE-74

TI-2020-15613 CVE-2020-25592 · GHSA-29j3-2446-5j4w

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and…

HIGH 76

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.57726 Published 2020-11-06 Partial fix · 2015.8.13, 2016.3.8 +7 CWE-287

TI-2019-12959 CVE-2019-17361 · GHSA-q53j-p6r2-g2v4

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is…

MEDIUM 58

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15106 Published 2020-01-17 Fixed in 2019.2.3 CWE-77

TI-2021-07532 CVE-2021-25283 · GHSA-xgmh-gfxw-2hvv

An issue was discovered in through SaltStack Salt before 3002.5.

MEDIUM 55

An issue was discovered in through SaltStack Salt before 3002.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10426 Published 2021-02-27 Partial fix · 2015.8.13, 2016.11.5 +6 CWE-94

TI-2021-02234 CVE-2021-3148 · GHSA-ghc2-hx3w-jqmp

An issue was discovered in SaltStack Salt before 3002.5.

MEDIUM 53

An issue was discovered in SaltStack Salt before 3002.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08246 Published 2021-02-27 Partial fix · 2015.8.13, 2016.11.5 +6 CWE-77

TI-2018-11232 CVE-2018-15751 · GHSA-x549-r7m8-gv63

SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to…

MEDIUM 50

SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04997 Published 2018-10-24 Fixed in 2017.7.8, 2018.3.3 +1 CWE-287

TI-2017-09473 CVE-2017-12791 · GHSA-xxvj-8g5m-4qgw

Directory traversal vulnerability in minion id validation in SaltStack Salt before…

MEDIUM 50

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04667 Published 2017-08-23 Partial fix · 2016.11.7, 2017.7.1 CWE-22

TI-2017-10765 CVE-2017-14695 · GHSA-j6gj-pg62-x8j6

Directory traversal vulnerability in minion id validation in SaltStack Salt before…

MEDIUM 48

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03252 Published 2017-10-24 Partial fix · 2016.3.8, 2016.11.8 +1 CWE-22

TI-2013-05448 CVE-2013-6617 · GHSA-7wx3-vr2f-6p29

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop…

MEDIUM 48

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03049 Published 2013-11-05 Fixed in 0.17.1 CWE-264

TI-2021-02231 CVE-2021-3144 · GHSA-w2hr-3mc8-46gh

In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration.

MEDIUM 47

In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.05196 Published 2021-02-27 Partial fix · 2015.8.13, 2016.11.5 +6 CWE-613

TI-2015-05789 CVE-2015-6941 · GHSA-cxm4-7qcw-267r

win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and…

MEDIUM 47

win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02886 Published 2017-08-09 Partial fix · 2015.5.6, 2015.8.1 CWE-534

TI-2021-07554 CVE-2021-25315 · GHSA-pmj6-9f8c-8g2m

salt-api unauthenticated remote code execution

MEDIUM 46

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02289 Published 2021-03-03 Partial fix · 3002.2-3, 3002.2 CWE-287

TI-2019-16046 CVE-2019-1010259 · GHSA-h8xp-h3jf-wv4v

SQL injection in SaltStack Salt

MEDIUM 46

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01935 Published 2019-07-18 Fixed in 2018.3.4 CWE-89

TI-2013-03890 CVE-2013-4437 · GHSA-qr3x-v97p-42xw

Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified…

MEDIUM 46

Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01458 Published 2013-11-05 Fixed in 0.17.1

TI-2024-26051 CVE-2024-38824 · GHSA-8pcp-r83j-fc92

CVE-2024-38824 salt advisory

MEDIUM 45

Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01035 Published 2025-06-13 Fixed in 3006.12, 3007.4 CWE-22

TI-2017-05504 CVE-2017-7893 · GHSA-g283-88v5-rmq2

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

MEDIUM 45

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01373 Published 2018-04-23 Partial fix · 2016.3.6

TI-2022-07144 CVE-2022-22967 · GHSA-fpxm-fprw-6hxj

Incorrect authorization in SaltStack Salt

MEDIUM 44

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02062 Published 2022-06-22 Fixed in 3002.9, 3003.5 +1 CWE-863

TI-2017-03315 CVE-2017-5200 · GHSA-8r7r-x48r-pf8f

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x…

MEDIUM 44

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03294 Published 2017-09-26 Fixed in 2015.8.13, 2016.3.5 +1

TI-2016-07845 CVE-2016-9639 · GHSA-hvmj-356c-gpf4

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

MEDIUM 44

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02653 Published 2017-02-07 Partial fix · 2015.8.11 CWE-284

Open these records in search →