https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:26:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03941 bdu:2020-03941 https://cve.radiocsirt.org/vuln/bdu:2020-03941 https://cve.radiocsirt.org/vuln/certfr-2020-ale-012 certfr-2020-ale-012 https://cve.radiocsirt.org/vuln/certfr-2020-ale-012 https://cve.radiocsirt.org/vuln/certfr-2020-avi-263 certfr-2020-avi-263 https://cve.radiocsirt.org/vuln/certfr-2020-avi-263 https://cve.radiocsirt.org/vuln/cisco-sa-salt-2vx545ag <p>On April 29, 2020, the Salt Open Core team notified their community regarding the following two CVE-IDs: CVE-2020-11651: Authentication Bypass Vulnerability CVE-2020-11652: Directory Traversal Vulnerability Cisco Modeling Labs Corporate Edition (CML), Cisco TelePresence IX5000 Series, and Cisco Virtual Internet Routing Lab Personal Edition (VIRL-PE) incorporate a version of SaltStack that is running the salt-master service that is affected by these vulnerabilities. Cisco has released software updates that address these vulnerabilities. There are workarounds that address these vulnerabilities.</p> <p>On April 29, 2020, the Salt Open Core team notified their community regarding the following two CVE-IDs: CVE-2020-11651: Authentication Bypass Vulnerability CVE-2020-11652: Directory Traversal Vulnerability Cisco Modeling Labs Corporate Edition (CML), Cisco TelePresence IX5000 Series, and Cisco Virtual Internet Routing Lab Personal Edition (VIRL-PE) incorporate a version of SaltStack that is running the salt-master service that is affected by these vulnerabilities. Cisco has released software updates that address these vulnerabilities. There are workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-salt-2vx545ag https://cve.radiocsirt.org/vuln/cnvd-2020-26254 cnvd-2020-26254 https://cve.radiocsirt.org/vuln/cnvd-2020-26254 https://cve.radiocsirt.org/vuln/euvd-2026-256106 EUVD-2026-256106 https://cve.radiocsirt.org/vuln/euvd-2026-256106 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11651 <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11651 https://cve.radiocsirt.org/vuln/ghsa-pjhf-vpx3-33r3 <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.</p> <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.</p> https://cve.radiocsirt.org/vuln/ghsa-pjhf-vpx3-33r3 https://cve.radiocsirt.org/vuln/gsd-2020-11651 gsd-2020-11651 https://cve.radiocsirt.org/vuln/gsd-2020-11651 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0564-1 <p>Security update for salt</p> <p>Security update for salt</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0564-1 https://cve.radiocsirt.org/vuln/pysec-2020-102 <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.</p> <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.</p> https://cve.radiocsirt.org/vuln/pysec-2020-102 https://cve.radiocsirt.org/vuln/suse-su-2020:1147-1 <p>Security update for salt</p> <p>Security update for salt</p> https://cve.radiocsirt.org/vuln/suse-su-2020:1147-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11651 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: salt, Ubuntu:16.04:LTS: salt, Ubuntu:18.04:LTS: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: salt, Ubuntu:16.04:LTS: salt, Ubuntu:18.04:LTS: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11651 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1449 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Administratorrechte zu erlangen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1449