salt vulnerabilities (SUSE)
66 vulnerabilities.
-
saltSUSE Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
saltSUSE Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
saltSUSE Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
saltSUSE Excessive read buffering DoS in http.client 6.3 Medium -
saltSUSE Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
saltSUSE Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
saltSUSE CVE-2024-38824 salt advisory 9.6 Critical -
saltSUSE CVE-2025-22242 salt advisory 5.6 Medium -
saltSUSE CVE-2025-22241 salt advisory 5.6 Medium -
saltSUSE CVE-2025-22240 salt advisory 6.3 Medium -
saltSUSE CVE-2025-22239 salt advisory 8.1 High -
saltSUSE CVE-2025-22238 salt advisory 4.2 Medium -
saltSUSE CVE-2025-22237 salt advisory 6.7 Medium -
saltSUSE CVE-2025-22236 salt advisory 8.1 High -
saltSUSE CVE-2024-38825 Salt Advisory 6.4 Medium -
saltSUSE CVE-2024-38823 Salt Advisory 2.7 Low -
saltSUSE CVE-2024-38822 Salt Advisory 2.7 Low -
saltSUSE Tornado vulnerable to excessive logging caused by malformed multipart form data 7.5 High -
saltSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
saltSUSE Database password leaked by systemd uyuni-server-attestation service 5.7 Medium -
saltSUSE Specially crafted url can be created which leads to a directory traversal in the salt file server 7.7 High -
saltSUSE Syndic cache directory creation is vulnerable to a directory traversal attack 5.0 Medium -
saltSUSE Salt security advisory release - 2023-OCT-27 6.7 Medium -
saltSUSE Salt can cause Git Providers to get wrong data 4.2 Medium -
saltSUSE Salt vulnerable to denial of service 5.3 Medium -
saltSUSE Security update for salt and python-pyzmq No score -
saltSUSE Security update for salt No score -
saltSUSE Security update for salt No score -
saltSUSE Security update for Salt No score -
saltSUSE Open redirect in Tornado 6.1 Medium -
saltSUSE Salt's PAM auth fails to reject locked accounts 8.8 High -
saltSUSE Recommended update for Salt No score -
saltSUSE SaltStack Salt Permissions Bypass 8.8 High -
saltSUSE SaltStack Salt Authentication Bypass by Capture-replay 8.8 High -
saltSUSE SaltStack Salt Improper Authentication via Man in the Middle Attack 3.7 Low -
saltSUSE SaltStack Improper Verification of Cryptographic Signature 8.8 High -
saltSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
saltSUSE Command Injection in SaltStack Salt 7.8 High -
saltSUSE salt-api unauthenticated remote code execution 9.8 Critical -
saltSUSE SaltStack Salt is vulnerable to shell injection via ProxyCommand argument 9.8 Critical -
saltSUSE SaltStack Salt command injection in the Salt-API when using the Salt-SSH client 9.8 Critical -
saltSUSE SaltStack Salt eauth tokens can be used once after expiration 9.1 Critical -
saltSUSE SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod 4.4 Medium -
saltSUSE SaltStack Salt Server Side Template Injection 9.8 Critical -
saltSUSE SaltStack Salt Directory Traversal vulnerability 9.1 Critical -
saltSUSE SaltStack Salt Improper Authentication vulnerability 9.8 Critical -
saltSUSE SaltStack Salt Improper SSL Certificate Validation 7.4 High -
saltSUSE SaltStack Salt Improper Certificate Validation 5.9 Medium -
saltSUSE SaltStack Salt command injection via a crafted process name 7.8 High -
saltSUSE SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical - Show olderLoading…