SA
Product
Salt
On CISA KEVExploited in the wild
52
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 17Medium 10Low 2
Watch
Add Salt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-4436 | – | Nov 5 | The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via… Affected: 0.17.0 |
| CVE-2013-4435 | – | Nov 5 | Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the… Affected: 0.15.0; 0.15.1; 0.16.0; 0.16.2; 0.16.3; 0.16.4; +1 more |