Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

saltstack salt 0.16.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-4435
Salt (aka SaltStack) 0.15.0 up to and including 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
Saltstack Salt 0.15.0Saltstack Salt 0.15.1Saltstack Salt 0.17.0Saltstack Salt 0.16.0Saltstack Salt 0.16.3Saltstack Salt 0.16.2Saltstack Salt 0.16.4
NA
CVE-2013-4439
Salt (aka SaltStack) prior to 0.15.0 up to and including 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.
Saltstack Salt 0.15.0Saltstack Salt 0.15.1Saltstack Salt 0.16.0Saltstack Salt 0.16.2Saltstack Salt 0.16.3Saltstack Salt 0.16.4Saltstack Salt 0.17.0
NA
CVE-2013-6617
The salt master in Salt (aka SaltStack) 0.11.0 up to and including 0.17.0 does not properly drop group privileges, which makes it easier for remote malicious users to gain privileges.
Saltstack Salt 0.16.2Saltstack Salt 0.16.3Saltstack Salt 0.16.4Saltstack Salt 0.17.0Saltstack Salt 0.14.0Saltstack Salt 0.15.1Saltstack Salt 0.11.0Saltstack Salt 0.13.0Saltstack Salt 0.15.0Saltstack Salt 0.16.0Saltstack Salt 0.12.0
NA
CVE-2013-4438
Salt (aka SaltStack) prior to 0.17.1 allows remote malicious users to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.
Saltstack Salt 0.16.4Saltstack Salt 0.16.3Saltstack Salt 0.16.2Saltstack Salt 0.16.0Saltstack Salt 0.9.8Saltstack Salt 0.9.7Saltstack Salt 0.9.6Saltstack Salt 0.9.5Saltstack Salt 0.9.4Saltstack Salt 0.12.0Saltstack Salt 0.11.0Saltstack Salt 0.10.5Saltstack Salt 0.10.4Saltstack Salt 0.8.8Saltstack Salt 0.8.7Saltstack Salt 0.8.0Saltstack Salt 0.7.0Saltstack Salt 0.15.0Saltstack Salt 0.13.0Saltstack Salt 0.10.3Saltstack Salt 0.10.0Saltstack Salt 0.9.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook