Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

Affected: PyPI: salt

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

python311-salt-3006.0-41.1 on GA media

Affected: PyPI: salt

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

Security update 5.0.5 for Multi-Linux Manager Salt Bundle

Affected: Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: salt, Ubuntu:22.04:LTS: salt

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren, beliebigen Programmcode auszuführen, einen Denial-of-Service auszulösen oder weitere nicht spezifizierte Auswirkungen zu erzielen.