Approved changes feed: RSS · Atom
cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Saltstack (505beb5a-4fc5-5540-9632-5d28b16aab0d) |
|---|---|
| Product | Salt (dd0d2bbf-d65f-5171-9eae-a243e2f3cc18) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/saltstack/salt |
purl2cpe | 2026-06-01 10:16:14.738680 |
pkg:rpm/fedora/salt |
purl2cpe | 2026-06-01 10:16:14.738682 |
pkg:rpm/opensuse/salt |
purl2cpe | 2026-06-01 10:16:14.738683 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-38824 |
vulnerable | 2026-06-08 06:41:48.219580 |
CVE-2024-38824 salt advisory
CRITICAL (9.6)
Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory.
Published: 2025-06-13T07:10:31.166Z
Updated: 2026-02-26T17:50:37.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20898 |
vulnerable | 2026-06-08 05:54:18.123915 |
Details available
MEDIUM (4.2)
Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.
Published: 2023-09-05T10:59:10.439Z
Updated: 2025-02-13T16:40:10.201Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20897 |
vulnerable | 2026-06-08 05:54:18.123406 |
Details available
MEDIUM (5.3)
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
Published: 2023-09-05T10:56:33.183Z
Updated: 2025-02-13T16:40:09.607Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22967 |
vulnerable | 2026-06-08 05:40:55.792999 |
Details available
An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.
Published: 2022-06-22T00:00:00.000Z
Updated: 2025-05-05T16:28:14.931Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22941 |
vulnerable | 2026-06-08 05:40:55.585982 |
Details available
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.
Published: 2022-03-29T00:00:00.000Z
Updated: 2025-05-05T16:28:25.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22936 |
vulnerable | 2026-06-08 05:40:55.578403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22935 |
vulnerable | 2026-06-08 05:40:55.578021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22934 |
vulnerable | 2026-06-08 05:40:55.577569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3197 |
vulnerable | 2026-06-08 05:33:51.018819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3148 |
vulnerable | 2026-06-08 05:33:50.888131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3144 |
vulnerable | 2026-06-08 05:33:50.875555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33226 |
vulnerable | 2026-06-08 05:32:11.025466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31607 |
vulnerable | 2026-06-08 05:31:53.741450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25315 |
vulnerable | 2026-06-08 05:30:40.641827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25284 |
vulnerable | 2026-06-08 05:30:40.601013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25283 |
vulnerable | 2026-06-08 05:30:40.599892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25282 |
vulnerable | 2026-06-08 05:30:40.598807 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25281 |
vulnerable | 2026-06-08 05:30:40.596850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22004 |
vulnerable | 2026-06-08 05:29:59.618686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21996 |
vulnerable | 2026-06-08 05:29:59.579024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35662 |
vulnerable | 2026-06-08 05:25:01.492819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28972 |
vulnerable | 2026-06-08 05:23:56.702268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28243 |
vulnerable | 2026-06-08 05:23:53.925832 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25592 |
vulnerable | 2026-06-08 05:22:36.878388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17490 |
vulnerable | 2026-06-08 05:20:56.587190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16846 |
vulnerable | 2026-06-08 05:20:53.960182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11652 |
vulnerable | 2026-06-08 05:16:47.588302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11651 |
vulnerable | 2026-06-08 05:16:47.585114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17361 |
vulnerable | 2026-06-08 05:13:10.357209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010259 |
vulnerable | 2026-06-08 05:12:21.751273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15751 |
vulnerable | 2026-06-08 05:11:03.446278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15750 |
vulnerable | 2026-06-08 05:11:03.445612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7893 |
vulnerable | 2026-06-08 05:10:06.299164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5200 |
vulnerable | 2026-06-08 05:09:39.331416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5192 |
vulnerable | 2026-06-08 05:09:39.315894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14696 |
vulnerable | 2026-06-08 05:08:57.171748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14695 |
vulnerable | 2026-06-08 05:08:57.163090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12791 |
vulnerable | 2026-06-08 05:08:47.887836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9639 |
vulnerable | 2026-06-08 05:08:24.153460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3176 |
vulnerable | 2026-06-08 05:07:44.943986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8034 |
vulnerable | 2026-06-08 05:07:02.955138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1839 |
vulnerable | 2026-06-08 05:06:26.415142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1838 |
vulnerable | 2026-06-08 05:06:26.414648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3563 |
vulnerable | 2026-06-08 05:05:33.466709 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4438 |
vulnerable | 2026-06-08 05:04:46.722748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.