Поиск уязвимостей
Количество 31
Количество 31
ALT-PU-2020-4251
ALT-PU-2020-4251: package `salt` update to version 3002.2-alt1
CVE-2021-25315
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.
CVE-2021-25315
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.
CVE-2021-25315
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.
CVE-2021-25315
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Ent ...
CVE-2020-16846
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
CVE-2020-16846
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
CVE-2020-16846
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
CVE-2020-16846
An issue was discovered in SaltStack Salt through 3002. Sending crafte ...
ALT-PU-2021-1591
ALT-PU-2021-1591: package `salt` update to version 3003-alt2
GHSA-pmj6-9f8c-8g2m
Saltstack Salt Unauthenticated Arbitrary Code Execution
BDU:2021-01592
Уязвимость системы управления конфигурациями и удалённого выполнения операций SaltStack Salt, связанная с неправильной реализацией алгоритма аутентификации, позволяющая нарушителю выполнить произвольный код
GHSA-qr38-h96j-2j3w
SaltStack Salt Command Injection in netapi ssh client
BDU:2021-01903
Уязвимость системы управления конфигурациями и удалённого выполнения операций Salt, связанная с отсутствием мер по нейтрализации специальных элементов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
SUSE-SU-2021:2104-1
Security update for Salt
openSUSE-SU-2020:1868-1
Security update for salt
openSUSE-SU-2020:1833-1
Security update for salt
SUSE-SU-2020:3245-1
Security update for Salt
SUSE-SU-2020:3244-1
Security update for Salt
SUSE-SU-2020:3243-1
Security update for salt
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-4251 ALT-PU-2020-4251: package `salt` update to version 3002.2-alt1 | CVSS3: 9.8 | почти 6 лет назад | |
 | CVE-2021-25315 CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. | CVSS3: 7.8 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-25315 CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. | CVSS3: 7.8 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-25315 CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. | CVSS3: 7.8 | 2% Низкий | больше 5 лет назад |
| CVE-2021-25315 CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Ent ... | CVSS3: 7.8 | 2% Низкий | больше 5 лет назад |
| CVE-2020-16846 An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. | CVSS3: 9.8 | 100% Критический | около 6 лет назад |
| CVE-2020-16846 An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. | CVSS3: 9.8 | 100% Критический | около 6 лет назад |
| CVE-2020-16846 An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. | CVSS3: 9.8 | 100% Критический | около 6 лет назад |
| CVE-2020-16846 An issue was discovered in SaltStack Salt through 3002. Sending crafte ... | CVSS3: 9.8 | 100% Критический | около 6 лет назад |
| ALT-PU-2021-1591 ALT-PU-2021-1591: package `salt` update to version 3003-alt2 | CVSS3: 9.8 | больше 5 лет назад | |
| GHSA-pmj6-9f8c-8g2m Saltstack Salt Unauthenticated Arbitrary Code Execution | CVSS3: 7.8 | 2% Низкий | больше 4 лет назад |
 | BDU:2021-01592 Уязвимость системы управления конфигурациями и удалённого выполнения операций SaltStack Salt, связанная с неправильной реализацией алгоритма аутентификации, позволяющая нарушителю выполнить произвольный код | CVSS3: 5.9 | 2% Низкий | больше 5 лет назад |
| GHSA-qr38-h96j-2j3w SaltStack Salt Command Injection in netapi ssh client | CVSS3: 9.8 | 100% Критический | больше 4 лет назад |
| BDU:2021-01903 Уязвимость системы управления конфигурациями и удалённого выполнения операций Salt, связанная с отсутствием мер по нейтрализации специальных элементов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 9.8 | 100% Критический | около 6 лет назад |
 | SUSE-SU-2021:2104-1 Security update for Salt | больше 5 лет назад | ||
| openSUSE-SU-2020:1868-1 Security update for salt | около 6 лет назад | ||
| openSUSE-SU-2020:1833-1 Security update for salt | около 6 лет назад | ||
| SUSE-SU-2020:3245-1 Security update for Salt | около 6 лет назад | ||
| SUSE-SU-2020:3244-1 Security update for Salt | около 6 лет назад | ||
| SUSE-SU-2020:3243-1 Security update for salt | около 6 лет назад |
Уязвимостей на страницу