Saltstack Salt vulnerabilities

53 known vulnerabilities affecting saltstack/salt.

Total CVEs

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL20HIGH19MEDIUM12LOW2

Vulnerabilities

Page 3 of 3

CVE-2015-1838MEDIUMCVSS 5.3≤ 2014.7.32017-04-13

CVE-2015-1838 [MEDIUM] CWE-19 CVE-2015-1838: modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp. modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

nvd

CVE-2015-1839MEDIUMCVSS 5.3≤ 2014.7.32017-04-13

CVE-2015-1839 [MEDIUM] CWE-19 CVE-2015-1839: modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp. modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

nvd

CVE-2016-9639CRITICALCVSS 9.1≤ 2015.8.102017-02-07

CVE-2016-9639 [CRITICAL] CWE-284 CVE-2016-9639: Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related t Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

nvd

CVE-2016-3176MEDIUMCVSS 5.6≤ 2015.5.9v2015.8.0+6 more2017-01-31

CVE-2016-3176 [MEDIUM] CWE-287 CVE-2016-3176: Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, all Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.

nvd

CVE-2015-8034LOWCVSS 3.3≤ 2015.8.22017-01-30

CVE-2015-8034 [LOW] CWE-200 CVE-2015-8034: The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

nvd

CVE-2016-1866HIGHCVSS 8.1v2015.8.0v2015.8.1+2 more2016-04-12

CVE-2016-1866 [HIGH] CWE-284 CVE-2016-1866: Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows ma Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.

nvd

CVE-2014-3563HIGHCVSS 7.2≤ 2014.1.92014-08-22

CVE-2014-3563 [HIGH] CWE-59 CVE-2014-3563: Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to h Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

nvd

CVE-2013-4437CRITICALCVSS 10.0v0.17.02013-11-05

CVE-2013-4437 [CRITICAL] CVE-2013-4437: Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vect Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."

nvd

CVE-2013-6617CRITICALCVSS 10.0v0.11.0v0.12.0+9 more2013-11-05

CVE-2013-6617 [CRITICAL] CWE-264 CVE-2013-6617: The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privilege The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.

nvd

CVE-2013-4436CRITICALCVSS 9.3v0.17.02013-11-05

CVE-2013-4436 [CRITICAL] CWE-20 CVE-2013-4436: The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.

nvd

CVE-2013-4438HIGHCVSS 7.5≤ 0.17.0v0.6.0+29 more2013-11-05

CVE-2013-4438 [HIGH] CWE-94 CVE-2013-4438: Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspec Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

nvd

CVE-2013-4439MEDIUMCVSS 4.9v0.15.0v0.15.1+5 more2013-11-05

CVE-2013-4439 [MEDIUM] CWE-264 CVE-2013-4439: Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.

nvd

CVE-2013-4435MEDIUMCVSS 6.0v0.15.0v0.15.1+5 more2013-11-05

CVE-2013-4435 [MEDIUM] CWE-287 CVE-2013-4435: Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.

nvd

← Previous3 / 3