Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-20898

Опубликовано: 05 сент. 2023
Источник: ubuntu
Приоритет: medium
CVSS3: 4.2

Описание

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps-legacy/xenial

needed

esm-apps/bionic

needed

esm-apps/jammy

needed

esm-apps/xenial

ignored

end of ESM support, was needed
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

jammy

needed

Показывать по

4.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.2
nvd
около 3 лет назад

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.

CVSS3: 4.2
debian
около 3 лет назад

Git Providers can read from the wrong environment because they get the ...

CVSS3: 4.2
github
около 3 лет назад

Salt can cause Git Providers to get wrong data

CVSS3: 7.8
fstec
около 3 лет назад

Уязвимость системы управления конфигурациями и удалённого выполнения операций SaltStack Salt, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить доступ к конфиденциальной информации

suse-cvrf
почти 3 года назад

Security update for salt

4.2 Medium

CVSS3