Skip to content
Noroxi

SaltStack records

56 published records for vendor SaltStack. 3 of them have been exploited in the wild (listed in CISA KEV) and 6 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
3 · 5.4%
Weaponized
6 · 10.7%
Pre-auth RCE
9
With a fix record
100%
Median publish → KEV
552 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

56 records
  • CVE-2020-16846
    99Now

    An issue was discovered in SaltStack Salt through 3002.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    saltstack · saltNov 6, 2020

  • CVE-2020-11651
    98Now

    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

    CriticalCVSS 9.8KEVWeaponizedEPSS 96%

    saltstack · saltApr 30, 2020

  • CVE-2020-11652
    82Now

    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

    MediumCVSS 6.5KEVWeaponizedEPSS 86%

    saltstack · saltApr 30, 2020

  • CVE-2021-25282
    64This week

    An issue was discovered in through SaltStack Salt before 3002.5.

    CriticalCVSS 9.1WeaponizedEPSS 92%

    saltstack · saltFeb 27, 2021

  • CVE-2021-25281
    61This week

    An issue was discovered in through SaltStack Salt before 3002.5.

    CriticalCVSS 9.8WeaponizedEPSS 72%

    saltstack · saltFeb 27, 2021

  • CVE-2021-3197
    61This week

    An issue was discovered in SaltStack Salt before 3002.5.

    CriticalCVSS 9.8No exploitEPSS 71%

    saltstack · saltFeb 27, 2021

  • CVE-2020-25592
    60This week

    In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens.

    CriticalCVSS 9.8WeaponizedEPSS 57%

    saltstack · saltNov 6, 2020

  • CVE-2019-17361
    44Plan

    In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection.

    CriticalCVSS 9.8No exploitEPSS 15%

    saltstack · saltJan 16, 2020

  • CVE-2021-25283
    42Plan

    An issue was discovered in through SaltStack Salt before 3002.5.

    CriticalCVSS 9.8No exploitEPSS 10%

    saltstack · saltFeb 27, 2021

  • CVE-2021-3148
    41Plan

    An issue was discovered in SaltStack Salt before 3002.5.

    CriticalCVSS 9.8No exploitEPSS 8%

    saltstack · saltFeb 27, 2021

  • CVE-2013-6617
    41Plan

    The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote atta

    CriticalCVSS 10.0No exploitEPSS 3%

    saltstack · saltNov 5, 2013

  • CVE-2018-15751
    40Plan

    SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands v

    CriticalCVSS 9.8No exploitEPSS 4%

    saltstack · saltOct 24, 2018

  • CVE-2017-12791
    40Plan

    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote mini

    CriticalCVSS 9.8No exploitEPSS 4%

    saltstack · saltAug 23, 2017

  • CVE-2017-14695
    40Plan

    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before

    CriticalCVSS 9.8No exploitEPSS 3%

    saltstack · saltOct 24, 2017

  • CVE-2015-6941
    40Plan

    win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in de

    CriticalCVSS 9.8No exploitEPSS 2%

    saltstack · salt 2015Aug 9, 2017

  • CVE-2019-1010259
    40Plan

    SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection.

    CriticalCVSS 9.8No exploitEPSS 1%

    saltstack · salt 2018Jul 18, 2019

  • CVE-2013-4437
    40Plan

    Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."

    CriticalCVSS 10.0No exploitEPSS 1%

    saltstack · saltNov 5, 2013

  • CVE-2021-33226
    39Monitor

    Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/mo

    CriticalCVSS 9.8No exploitEPSS 1%

    saltstack · saltFeb 17, 2023

  • CVE-2017-7893
    39Monitor

    In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.

    CriticalCVSS 9.8No exploitEPSS 1%

    saltstack · saltApr 23, 2018

  • CVE-2021-3144
    38Monitor

    In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration.

    CriticalCVSS 9.1No exploitEPSS 5%

    saltstack · saltFeb 27, 2021

  • CVE-2013-4436
    38Monitor

    The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote at

    CriticalCVSS 9.3No exploitEPSS 1%

    saltstack · saltNov 5, 2013

  • CVE-2016-9639
    37Monitor

    Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

    CriticalCVSS 9.1No exploitEPSS 2%

    saltstack · saltFeb 7, 2017

  • CVE-2017-5200
    36Monitor

    Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on

    HighCVSS 8.8No exploitEPSS 3%

    saltstack · saltSep 26, 2017

  • CVE-2022-22967
    36Monitor

    An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2.

    HighCVSS 8.8No exploitEPSS 2%

    saltstack · saltJun 23, 2022

  • CVE-2017-5192
    36Monitor

    When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2

    HighCVSS 8.8No exploitEPSS 1%

    saltstack · saltSep 26, 2017