Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade salt | Aug 22, 2024 | Jun 27, 2024 |
| Gentoo Linux | — | Upgrade app-admin/salt. | Dec 9, 2024 | Jun 27, 2024 |
| Suse | — | Upgrade salt-bash-completionUpgrade saltUpgrade salt-apiUpgrade salt-docUpgrade salt-masterUpgrade salt-cloudUpgrade salt-minionUpgrade salt-sshUpgrade salt-transactional-updateUpgrade salt-zsh-completionUpgrade salt-proxyUpgrade python3-saltUpgrade salt-syndicUpgrade salt-fish-completionUpgrade salt-standalone-formulas-configuration | Feb 16, 2024 | Feb 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub