All products

Red Hat Ceph Storage 1.3/salt

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SaltStack Salt Directory traversal vulnerability in minion id validationCVE-2017-12791 · GHSA-XXVJ-8G5M-4QGWVersion ranges need review. saltRed Hat Ceph Storage 1.3/salt PyPIRed Hat Critical Fix reported
salt password information leaked in debug logsCVE-2015-6941 · GHSA-CXM4-7QCW-267RVersion ranges need review. saltRed Hat Ceph Storage 1.2/salt PyPIRed Hat Critical Fix reported
salt leaks git usernames and passwords to the logCVE-2015-6918 · GHSA-Q2X6-8GFJ-HJXWVersion ranges need review. saltRed Hat Ceph Storage 1.2/salt PyPIRed Hat Medium Fix reported
SaltStack Salt Directory traversal vulnerability in minion id validationCVE-2017-14695 · GHSA-J6GJ-PG62-X8J6Version ranges need review. saltRed Hat Ceph Storage 1.3/salt PyPIRed Hat Critical Fix reported
SaltStack Salt Denial of Service via a crafted authentication requestCVE-2017-14696 · GHSA-657P-CJ5R-MJRHVersion ranges need review. saltRed Hat Ceph Storage 1.3/salt PyPIRed Hat High Fix reported
Salt vulnerable to Improper Certificate ValidationCVE-2015-4017 · GHSA-8J9G-C9RP-JVG4Version ranges need review. saltRed Hat Ceph Storage 1.2/salt PyPIRed Hat High Fix reported
SaltStack Salt allows compromised salt-minions to impersonate the salt-masterCVE-2017-7893 · GHSA-G283-88V5-RMQ2Version ranges need review. saltRed Hat Ceph Storage 1.3/salt PyPIRed Hat Critical Fix reported
Salt allows deleted minions to read or write to minions with the same idCVE-2016-9639 · GHSA-HVMJ-356C-GPF4Version ranges need review. saltRed Hat Ceph Storage 1.3/salt PyPIRed Hat Critical Fix reported
Salt Insecure configuration of PAM external authentication serviceCVE-2016-3176 · GHSA-V2RP-9CPJ-PFW2Version ranges need review. saltRed Hat Ceph Storage 1.2/salt PyPIRed Hat Medium Fix reported
Salt uses weak permissions on the cache dataCVE-2015-8034 · GHSA-6PRW-8XHM-H247Version ranges need review. saltRed Hat Ceph Storage 1.2/calamari-server PyPIRed Hat Low Fix reported