Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
saltstack salt 0.16.4 vulnerabilities and exploits
(subscribe to this query)
6
CVSSv2
CVE-2013-4435
Salt (aka SaltStack) 0.15.0 up to and including 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.
Saltstack Salt 0.15.0
Saltstack Salt 0.15.1
Saltstack Salt 0.17.0
Saltstack Salt 0.16.0
Saltstack Salt 0.16.3
Saltstack Salt 0.16.2
Saltstack Salt 0.16.4
7.5
CVSSv2
CVE-2013-4438
Salt (aka SaltStack) prior to 0.17.1 allows remote malicious users to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.
Saltstack Salt 0.16.4
Saltstack Salt 0.16.3
Saltstack Salt 0.16.2
Saltstack Salt 0.16.0
Saltstack Salt 0.9.8
Saltstack Salt 0.9.7
Saltstack Salt 0.9.6
Saltstack Salt 0.9.5
Saltstack Salt 0.9.4
Saltstack Salt 0.12.0
Saltstack Salt 0.11.0
Saltstack Salt 0.10.5
Saltstack Salt 0.10.4
Saltstack Salt 0.8.8
Saltstack Salt 0.8.7
Saltstack Salt 0.8.0
Saltstack Salt 0.7.0
Saltstack Salt 0.15.0
Saltstack Salt 0.13.0
Saltstack Salt 0.10.3
Saltstack Salt 0.10.0
Saltstack Salt 0.9.3
4.9
CVSSv2
CVE-2013-4439
Salt (aka SaltStack) prior to 0.15.0 up to and including 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.
Saltstack Salt 0.15.0
Saltstack Salt 0.15.1
Saltstack Salt 0.16.0
Saltstack Salt 0.16.2
Saltstack Salt 0.16.3
Saltstack Salt 0.16.4
Saltstack Salt 0.17.0
10
CVSSv2
CVE-2013-6617
The salt master in Salt (aka SaltStack) 0.11.0 up to and including 0.17.0 does not properly drop group privileges, which makes it easier for remote malicious users to gain privileges.
Saltstack Salt 0.16.2
Saltstack Salt 0.16.3
Saltstack Salt 0.16.4
Saltstack Salt 0.17.0
Saltstack Salt 0.14.0
Saltstack Salt 0.15.1
Saltstack Salt 0.11.0
Saltstack Salt 0.13.0
Saltstack Salt 0.15.0
Saltstack Salt 0.16.0
Saltstack Salt 0.12.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started