Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade salt | Aug 22, 2024 | Jun 27, 2024 |
| Gentoo Linux | — | Upgrade app-admin/salt. | Dec 9, 2024 | Jun 27, 2024 |
| Suse | — | Upgrade saltUpgrade salt-bash-completionUpgrade salt-cloudUpgrade salt-minionUpgrade salt-apiUpgrade salt-docUpgrade salt-masterUpgrade python3-saltUpgrade salt-transactional-updateUpgrade salt-syndicUpgrade salt-sshUpgrade salt-standalone-formulas-configurationUpgrade salt-zsh-completionUpgrade salt-fish-completionUpgrade salt-proxy | Feb 16, 2024 | Feb 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub