SaltStack Salt Shell Injection Vulnerability

SaltStack Salt Authentication Bypass Vulnerability

SaltStack Salt Path Traversal Vulnerability

Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file

An issue was discovered in SaltStack Salt before 3002.5

An issue was discovered in SaltStack Salt before 3002.5

An issue was discovered in through SaltStack Salt before 3002.5

An issue was discovered in through SaltStack Salt before 3002.5

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection

SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi)

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with…

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to…

In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration

An issue was discovered in through SaltStack Salt before 3002.5

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1

Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client

When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not…

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into…

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2

In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without…

An issue was discovered in SaltStack Salt before 3002.5

The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to…

Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory

An issue was discovered in SaltStack Salt before 3003.3

SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request

Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated

An issue was discovered in SaltStack Salt before 3003.3

In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an…

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return

Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp

modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp

An issue was discovered in through SaltStack Salt before 3002.5

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1

The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1)…

The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges

Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors

Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."