salt vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-25283Criticalsalt: SaltStack Salt Server Side Template Injection CVE-2021-25281Criticalsalt: SaltStack Salt Improper Authentication vulnerability CVE-2020-28243Highsalt: SaltStack Salt command injection via a crafted process name CVE-2020-28972Highsalt: SaltStack Salt Improper Certificate Validation CVE-2020-35662Highsalt: SaltStack Salt Improper SSL Certificate Validation CVE-2020-16846Criticalsalt: SaltStack Salt Command Injection in netapi ssh client CVE-2020-25592Criticalsalt: SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi CVE-2020-17490Mediumsalt: SaltStack Salt Allows creating certificates with weak file permissions CVE-2020-11651Criticalsalt: SaltStack Salt Unauthenticated Remote Code Execution CVE-2020-11652Highsalt: SaltStack Salt is vulnerable Arbitrary Directory Access CVE-2019-17361Criticalsalt: SaltStack Salt is vulnerable to command injection CVE-2019-1010259Criticalsalt: SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function CVE-2013-6617Highsalt: SaltStack Privilege Escalation vulnerability CVE-2013-4439Highsalt: Minion identity not validated in saltstack CVE-2013-4436Highsalt: SaltStack MITM SSH attack in salt-ssh CVE-2013-4437Highsalt: SaltStack insecurely uses /tmp CVE-2013-4435Highsalt: Salt has insufficient argument validation in several modules CVE-2016-3176Mediumsalt: Salt Insecure configuration of PAM external authentication service CVE-2016-9639Criticalsalt: Salt allows deleted minions to read or write to minions with the same id CVE-2015-8034Lowsalt: Salt uses weak permissions on the cache data CVE-2015-1839Mediumsalt: SaltStack has insecure /tmp file handling in salt/modules/chef.py CVE-2015-1838Mediumsalt: Salt improper handling of tmp files CVE-2017-8109Highsalt: SaltStack Salt Information Exposure CVE-2015-6941Criticalsalt: salt password information leaked in debug logs CVE-2014-3563Highsalt: SaltStack Salt Insecure Temporary File Creation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo