SA
Product
Salt
On CISA KEVExploited in the wild
52
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 17Medium 10Low 2
Watch
Add Salt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22935 | 3.7 | Mar 29 | An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1 Affected: 3002 before 3002.8; 3003 before 3003.4; 3004 before 3004.1 |
| CVE-2015-8034 | 3.3 | Jan 30 | The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file Affected: through 2015.8.2 |
Showing 2