salt vulnerabilities (Ubuntu)
54 vulnerabilities.
-
saltUbuntu Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
saltUbuntu CVE-2024-38824 salt advisory 9.6 Critical -
saltUbuntu CVE-2025-22242 salt advisory 5.6 Medium -
saltUbuntu CVE-2025-22241 salt advisory 5.6 Medium -
saltUbuntu CVE-2025-22240 salt advisory 6.3 Medium -
saltUbuntu CVE-2025-22239 salt advisory 8.1 High -
saltUbuntu CVE-2025-22238 salt advisory 4.2 Medium -
saltUbuntu CVE-2025-22237 salt advisory 6.7 Medium -
saltUbuntu CVE-2025-22236 salt advisory 8.1 High -
saltUbuntu CVE-2024-38825 Salt Advisory 6.4 Medium -
saltUbuntu CVE-2024-38823 Salt Advisory 2.7 Low -
saltUbuntu CVE-2024-38822 Salt Advisory 2.7 Low -
saltUbuntu Specially crafted url can be created which leads to a directory traversal in the salt file server 7.7 High -
saltUbuntu Syndic cache directory creation is vulnerable to a directory traversal attack 5.0 Medium -
saltUbuntu Salt security advisory release - 2023-OCT-27 6.7 Medium -
saltUbuntu Salt can cause Git Providers to get wrong data 4.2 Medium -
saltUbuntu Salt vulnerable to denial of service 5.3 Medium -
saltUbuntu Open redirect in Tornado 6.1 Medium -
saltUbuntu Salt's PAM auth fails to reject locked accounts 8.8 High -
saltUbuntu SaltStack Salt Permissions Bypass 8.8 High -
saltUbuntu SaltStack Salt Authentication Bypass by Capture-replay 8.8 High -
saltUbuntu SaltStack Salt Improper Authentication via Man in the Middle Attack 3.7 Low -
saltUbuntu SaltStack Improper Verification of Cryptographic Signature 8.8 High -
saltUbuntu Exposure of Resource to Wrong Sphere in salt 7.5 High -
saltUbuntu Command Injection in SaltStack Salt 7.8 High -
saltUbuntu SaltStack Salt is vulnerable to shell injection via ProxyCommand argument 9.8 Critical -
saltUbuntu SaltStack Salt command injection in the Salt-API when using the Salt-SSH client 9.8 Critical -
saltUbuntu SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod 4.4 Medium -
saltUbuntu SaltStack Salt Server Side Template Injection 9.8 Critical -
saltUbuntu SaltStack Salt Directory Traversal vulnerability 9.1 Critical -
saltUbuntu SaltStack Salt Improper Authentication vulnerability 9.8 Critical -
saltUbuntu SaltStack Salt Improper SSL Certificate Validation 7.4 High -
saltUbuntu SaltStack Salt Improper Certificate Validation 5.9 Medium -
saltUbuntu SaltStack Salt command injection via a crafted process name 7.8 High -
saltUbuntu SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi 9.8 Critical -
saltUbuntu SaltStack Salt Allows creating certificates with weak file permissions 5.5 Medium -
saltUbuntu SaltStack Salt Command Injection in netapi ssh client 9.8 Critical -
saltUbuntu SaltStack Salt is vulnerable Arbitrary Directory Access 6.5 Medium -
saltUbuntu SaltStack Salt Unauthenticated Remote Code Execution 9.8 Critical -
saltUbuntu SaltStack Salt is vulnerable to command injection 9.8 Critical -
saltUbuntu SaltStack Salt Remote command execution and incorrect access control when using salt-api 9.8 Critical -
saltUbuntu SaltStack Salt Directory Traversal vulnerability in salt-api 5.3 Medium -
saltUbuntu SaltStack Salt allows compromised salt-minions to impersonate the salt-master 9.8 Critical -
saltUbuntu SaltStack Salt Denial of Service via a crafted authentication request 7.5 High -
saltUbuntu SaltStack Salt Directory traversal vulnerability in minion id validation 9.8 Critical -
saltUbuntu salt leaks git usernames and passwords to the log 6.3 Medium -
saltUbuntu SaltStack Salt Authentication Bypass when using the local_batch client from salt-api 8.8 High -
saltUbuntu SaltStack Salt Directory traversal vulnerability in minion id validation 9.8 Critical -
saltUbuntu salt password information leaked in debug logs 9.8 Critical -
saltUbuntu SaltStack Salt arbitrary command execution in Salt-api via ssh_client 8.8 High - Show olderLoading…