Saltstack Salt vulnerabilities
52 published vulnerabilities in Saltstack Salt, 3 of them exploited in the wild. The most were published in 2021 (12), and 1 so far in 2024.
Saltstack Salt vulnerabilities by year
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
Most exploited Saltstack Salt vulnerabilities
- CVE-2020-16846 SaltStack Salt Shell Injection
- CVE-2020-11651 SaltStack Salt Authentication Bypass
- CVE-2020-11652 SaltStack Salt Path Traversal
- CVE-2013-4437 SaltStack insecurely uses /tmp
- CVE-2013-6617 SaltStack Privilege Escalation vulnerability
- CVE-2021-33226 Code injection in n/a
- CVE-2021-25315 salt-api unauthenticated remote code execution
- CVE-2021-25281 SaltStack Salt Improper Authentication vulnerability
- CVE-2021-25283 SaltStack Salt Server Side Template Injection
- CVE-2021-3148 SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
- CVE-2021-3197 SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
- CVE-2020-25592 SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.