The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade salt | Aug 22, 2024 | Apr 30, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 30, 2020 |
| Debian | — | Upgrade salt | May 7, 2020 | Apr 30, 2020 |
| Freebsd | — | Upgrade py32-saltUpgrade py38-saltUpgrade py27-saltUpgrade py33-saltUpgrade py34-saltUpgrade py37-saltUpgrade py36-saltUpgrade py35-salt | May 17, 2020 | May 16, 2020 |
| Saltstack | — | Upgrade SaltStack to the latest version | May 6, 2020 | Apr 30, 2020 |
| Suse | — | Upgrade python3-distroUpgrade salt-apiUpgrade salt-zsh-completionUpgrade salt-syndicUpgrade salt-docUpgrade salt-proxyUpgrade salt-minionUpgrade salt-bash-completionUpgrade salt-sshUpgrade salt-transactional-updateUpgrade python2-saltUpgrade python3-saltUpgrade salt-standalone-formulas-configurationUpgrade python2-distroUpgrade python-singledispatchUpgrade saltUpgrade salt-fish-completionUpgrade salt-cloudUpgrade salt-master | May 1, 2020 | Apr 30, 2020 |
| Ubuntu | — | Upgrade salt-minionUpgrade salt-master (Ubuntu Pro)Upgrade salt-commonUpgrade salt-minion (Ubuntu Pro)Upgrade salt-masterUpgrade salt-apiUpgrade salt-common (Ubuntu Pro) | Aug 15, 2020 | Apr 30, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 30, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub