salt vulnerabilities (Alpine)
24 vulnerabilities.
-
saltAlpine Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
saltAlpine Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
saltAlpine Specially crafted url can be created which leads to a directory traversal in the salt file server 7.7 High -
saltAlpine Syndic cache directory creation is vulnerable to a directory traversal attack 5.0 Medium -
saltAlpine SaltStack Salt Permissions Bypass 8.8 High -
saltAlpine SaltStack Salt Authentication Bypass by Capture-replay 8.8 High -
saltAlpine SaltStack Salt Improper Authentication via Man in the Middle Attack 3.7 Low -
saltAlpine SaltStack Improper Verification of Cryptographic Signature 8.8 High -
saltAlpine Improper Authentication in SaltStack Salt 6.4 Medium -
saltAlpine Exposure of Resource to Wrong Sphere in salt 7.5 High -
saltAlpine Command Injection in SaltStack Salt 7.8 High -
saltAlpine SaltStack Salt is vulnerable to shell injection via ProxyCommand argument 9.8 Critical -
saltAlpine SaltStack Salt command injection in the Salt-API when using the Salt-SSH client 9.8 Critical -
saltAlpine SaltStack Salt eauth tokens can be used once after expiration 9.1 Critical -
saltAlpine SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod 4.4 Medium -
saltAlpine SaltStack Salt Server Side Template Injection 9.8 Critical -
saltAlpine SaltStack Salt Directory Traversal vulnerability 9.1 Critical -
saltAlpine SaltStack Salt Improper Authentication vulnerability 9.8 Critical -
saltAlpine SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
saltAlpine SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
saltAlpine SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
saltAlpine SaltStack Salt is vulnerable Arbitrary Directory Access 6.5 Medium -
saltAlpine SaltStack Salt Unauthenticated Remote Code Execution 9.8 Critical -
saltAlpine SaltStack Salt is vulnerable to command injection 9.8 Critical