Поиск уязвимостей
Количество 12
Количество 12
CVE-2023-34049
The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.
CVE-2023-34049
The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.
CVE-2023-34049
The Salt-SSH pre-flight option copies the script to the target at a pr ...
SUSE-SU-2023:4390-1
Security update for salt
SUSE-SU-2023:4389-1
Security update for salt
SUSE-SU-2023:4388-1
Security update for salt
SUSE-SU-2023:4387-1
Security update for salt
SUSE-SU-2023:4386-1
Security update for salt
GHSA-4277-m35q-7c9w
Salt preflight script could be attacker controlled
ALT-PU-2023-8079
ALT-PU-2023-8079: package `salt` update to version 3006.4-alt0.p10.1
ALT-PU-2023-6879
ALT-PU-2023-6879: package `salt` update to version 3006.4-alt1
ROS-20240412-04
Множественные уязвимости salt
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-34049 The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails. | CVSS3: 6.7 | 0% Низкий | почти 2 года назад |
 | CVE-2023-34049 The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails. | CVSS3: 6.7 | 0% Низкий | почти 2 года назад |
| CVE-2023-34049 The Salt-SSH pre-flight option copies the script to the target at a pr ... | CVSS3: 6.7 | 0% Низкий | почти 2 года назад |
 | SUSE-SU-2023:4390-1 Security update for salt | 0% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4389-1 Security update for salt | 0% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4388-1 Security update for salt | 0% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4387-1 Security update for salt | 0% Низкий | около 3 лет назад | |
| SUSE-SU-2023:4386-1 Security update for salt | 0% Низкий | около 3 лет назад | |
| GHSA-4277-m35q-7c9w Salt preflight script could be attacker controlled | CVSS3: 6.7 | 0% Низкий | почти 2 года назад |
| ALT-PU-2023-8079 ALT-PU-2023-8079: package `salt` update to version 3006.4-alt0.p10.1 | CVSS3: 6.7 | 0% Низкий | почти 3 года назад |
| ALT-PU-2023-6879 ALT-PU-2023-6879: package `salt` update to version 3006.4-alt1 | CVSS3: 6.7 | 0% Низкий | около 3 лет назад |
 | ROS-20240412-04 Множественные уязвимости salt | CVSS3: 8.1 | больше 2 лет назад |
Уязвимостей на страницу