İçeriğe atla
Noroxi

saltstack kayıtları

saltstack üreticisine ait 56 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
3 · %5,4
Silahlaştırılmış
6 · %10,7
Pre-auth RCE
9
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
552 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

56 kayıt
  • CVE-2020-16846
    99Hemen

    An issue was discovered in SaltStack Salt through 3002.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    saltstack · salt6 Kas 2020

  • CVE-2020-11651
    98Hemen

    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    saltstack · salt30 Nis 2020

  • CVE-2020-11652
    82Hemen

    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %86

    saltstack · salt30 Nis 2020

  • CVE-2021-25282
    64Bu hafta

    An issue was discovered in through SaltStack Salt before 3002.5.

    KritikCVSS 9,1SilahlaştırılmışEPSS %92

    saltstack · salt27 Şub 2021

  • CVE-2021-25281
    61Bu hafta

    An issue was discovered in through SaltStack Salt before 3002.5.

    KritikCVSS 9,8SilahlaştırılmışEPSS %73

    saltstack · salt27 Şub 2021

  • CVE-2021-3197
    61Bu hafta

    An issue was discovered in SaltStack Salt before 3002.5.

    KritikCVSS 9,8İstismar yokEPSS %72

    saltstack · salt27 Şub 2021

  • CVE-2020-25592
    56Planlayın

    In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens.

    KritikCVSS 9,8SilahlaştırılmışEPSS %58

    saltstack · salt6 Kas 2020

  • CVE-2019-17361
    44Planlayın

    In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection.

    KritikCVSS 9,8İstismar yokEPSS %15

    saltstack · salt16 Oca 2020

  • CVE-2021-25283
    42Planlayın

    An issue was discovered in through SaltStack Salt before 3002.5.

    KritikCVSS 9,8İstismar yokEPSS %11

    saltstack · salt27 Şub 2021

  • CVE-2021-3148
    41Planlayın

    An issue was discovered in SaltStack Salt before 3002.5.

    KritikCVSS 9,8İstismar yokEPSS %8

    saltstack · salt27 Şub 2021

  • CVE-2018-15751
    41Planlayın

    SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands v

    KritikCVSS 9,8İstismar yokEPSS %5

    saltstack · salt24 Eki 2018

  • CVE-2013-6617
    41Planlayın

    The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote atta

    KritikCVSS 10,0İstismar yokEPSS %3

    saltstack · salt5 Kas 2013

  • CVE-2017-12791
    40Planlayın

    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote mini

    KritikCVSS 9,8İstismar yokEPSS %5

    saltstack · salt23 Ağu 2017

  • CVE-2017-14695
    40Planlayın

    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before

    KritikCVSS 9,8İstismar yokEPSS %3

    saltstack · salt24 Eki 2017

  • CVE-2015-6941
    40Planlayın

    win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in de

    KritikCVSS 9,8İstismar yokEPSS %2

    saltstack · salt 20159 Ağu 2017

  • CVE-2019-1010259
    40Planlayın

    SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %2

    saltstack · salt 201818 Tem 2019

  • CVE-2013-4437
    40Planlayın

    Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."

    KritikCVSS 10,0İstismar yokEPSS %1

    saltstack · salt5 Kas 2013

  • CVE-2021-33226
    39İzleyin

    Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/mo

    KritikCVSS 9,8İstismar yokEPSS %2

    saltstack · salt17 Şub 2023

  • CVE-2017-7893
    39İzleyin

    In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

    KritikCVSS 9,8İstismar yokEPSS %1

    saltstack · salt23 Nis 2018

  • CVE-2021-3144
    38İzleyin

    In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration.

    KritikCVSS 9,1İstismar yokEPSS %5

    saltstack · salt27 Şub 2021

  • CVE-2013-4436
    38İzleyin

    The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote at

    KritikCVSS 9,3İstismar yokEPSS %2

    saltstack · salt5 Kas 2013

  • CVE-2016-9639
    37İzleyin

    Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

    KritikCVSS 9,1İstismar yokEPSS %3

    saltstack · salt7 Şub 2017

  • CVE-2017-5200
    36İzleyin

    Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on

    YüksekCVSS 8,8İstismar yokEPSS %3

    saltstack · salt26 Eyl 2017

  • CVE-2022-22967
    36İzleyin

    An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2.

    YüksekCVSS 8,8İstismar yokEPSS %2

    saltstack · salt23 Haz 2022

  • CVE-2017-5192
    36İzleyin

    When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2

    YüksekCVSS 8,8İstismar yokEPSS %2

    saltstack · salt26 Eyl 2017