Git Providers can read from the wrong environment because they get the same cache…
Priority LOW 34Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.
Summary
Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00318 24th percentileScored 2026-11-07
Fix Fixed salt (PyPI): 3005.2, 3006.2
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Salt | Salt masters prior to 3005.2 or 3006.2 | — | No fix listed | CNA |
| — | salt (PyPI) | before 3005.2 | 3005.2 | Patch available | GHSA-qvh6-3j7x-3hq7 |
| — | salt (PyPI) | 3006.0rc1 to before 3006.2 | 3006.2 | Patch available | GHSA-qvh6-3j7x-3hq7 |
- Salt Vendor— Affected Salt masters prior to 3005.2 or 3006.2 Fixed in — No fix listed CNA
- salt (PyPI) Vendor— Affected before 3005.2 Fixed in 3005.2 Patch available GHSA-qvh6-3j7x-3hq7
- salt (PyPI) Vendor— Affected 3006.0rc1 to before 3006.2 Fixed in 3006.2 Patch available GHSA-qvh6-3j7x-3hq7
Remediation
- Fix · GHSA-qvh6-3j7x-3hq7 salt (PyPI) Fixed in 3005.2 Advisory →
- Fix · GHSA-qvh6-3j7x-3hq7 salt (PyPI) Fixed in 3006.2 Advisory →
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20898
- 2026-10-03 Alias added: GHSA-qvh6-3j7x-3hq7
References
Advisory 2
Other 5
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml
- https://github.com/saltstack/salt
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
- https://saltproject.io/security-announcements/2023-08-10-advisory
More SaltStack Salt vulnerabilities
- TI-2020-12851 An issue was discovered in SaltStack Salt through 3002. KEVCVSS 3.1CRITICAL 9.8
- TI-2020-09349 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. KEVCVSS 3.1CRITICAL 9.8
- TI-2021-07530 An issue was discovered in through SaltStack Salt before 3002.5. CVSS 3.1CRITICAL 9.8
- TI-2020-09350 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. KEVCVSS 3.1MEDIUM 6.5
- TI-2021-07531 An issue was discovered in through SaltStack Salt before 3002.5. CVSS 3.1CRITICAL 9.1
- TI-2021-12769 Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-20898 · CVE Program
- CVE-2023-20898 · NVD
- FIRST EPSS
- GHSA-qvh6-3j7x-3hq7 · GitHub Advisory Database · CC BY 4.0
- CVE-2023-20898 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences