Vulnerabilities (CVE)

Filtered by vendor Saltstack Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-22935 1 Saltstack 1 Salt 2023-12-21 4.3 MEDIUM 3.7 LOW
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.
CVE-2015-8034 1 Saltstack 1 Salt 2017-03-02 2.1 LOW 3.3 LOW
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.