| SaltStack Salt Directory traversal vulnerability in minion id validationCVE-2017-12791 · GHSA-XXVJ-8G5M-4QGWVersion ranges need review. |
saltRed Hat Ceph Storage 1.3/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt Directory traversal vulnerability in minion id validationCVE-2017-14695 · GHSA-J6GJ-PG62-X8J6Version ranges need review. |
saltRed Hat Ceph Storage 1.3/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt Denial of Service via a crafted authentication requestCVE-2017-14696 · GHSA-657P-CJ5R-MJRHVersion ranges need review. |
saltRed Hat Ceph Storage 1.3/salt |
PyPIRed Hat |
High
|
Fix reported |
|
| SaltStack Salt is vulnerable to shell injection via ProxyCommand argumentCVE-2021-3197 · GHSA-8RP6-X3R7-5QW3Version ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt command injection via a crafted process nameCVE-2020-28243 · GHSA-PHHW-3WC9-8Q75Version ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
High
|
Fix reported |
|
| Saltstack Salt Unauthenticated Arbitrary Code ExecutionCVE-2021-25315 · GHSA-PMJ6-9F8C-8G2MVersion ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
High
|
Fix reported |
|
| SaltStack Salt Improper SSL Certificate ValidationCVE-2020-35662 · GHSA-QX72-Q6W3-QGC7Version ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
High
|
Fix reported |
|
| SaltStack Salt Improper Certificate ValidationCVE-2020-28972 · GHSA-W589-R335-4F55Version ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
High
|
Fix reported |
|
| SaltStack Salt is vulnerable Arbitrary Directory AccessCVE-2020-11652 · GHSA-VP49-2G4R-M3X3Version ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
High
|
Fix reported |
|
| SaltStack Salt Unauthenticated Remote Code ExecutionCVE-2020-11651 · GHSA-PJHF-VPX3-33R3Version ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt Command Injection in netapi ssh clientCVE-2020-16846 · GHSA-QR38-H96J-2J3WVersion ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapiCVE-2020-25592 · GHSA-29J3-2446-5J4WVersion ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt Allows creating certificates with weak file permissionsCVE-2020-17490 · GHSA-3C56-VX6V-Q5VHVersion ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Medium
|
Fix reported |
|
| SaltStack Salt Improper Authentication vulnerabilityCVE-2021-25281 · GHSA-XXW3-765M-F37PVersion ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt Directory Traversal vulnerabilityCVE-2021-25282 · GHSA-76X4-X3P6-RPR9Version ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
High
|
Fix reported |
|
| SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod CVE-2021-25284 · GHSA-R55W-XPH5-XVX2Version ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Medium
|
Fix reported |
|
| SaltStack Salt eauth tokens can be used once after expirationCVE-2021-3144 · GHSA-W2HR-3MC8-46GHVersion ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt Server Side Template InjectionCVE-2021-25283 · GHSA-XGMH-GFXW-2HVVVersion ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt command injection in the Salt-API when using the Salt-SSH clientCVE-2021-3148 · GHSA-GHC2-HX3W-JQMPVersion ranges need review. |
saltRed Hat Ceph Storage 2/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
| SaltStack Salt allows compromised salt-minions to impersonate the salt-masterCVE-2017-7893 · GHSA-G283-88V5-RMQ2Version ranges need review. |
saltRed Hat Ceph Storage 1.3/salt |
PyPIRed Hat |
Critical
|
Fix reported |
|
