https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:38:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03942 bdu:2020-03942 https://cve.radiocsirt.org/vuln/bdu:2020-03942 https://cve.radiocsirt.org/vuln/certfr-2020-ale-012 certfr-2020-ale-012 https://cve.radiocsirt.org/vuln/certfr-2020-ale-012 https://cve.radiocsirt.org/vuln/certfr-2020-avi-263 certfr-2020-avi-263 https://cve.radiocsirt.org/vuln/certfr-2020-avi-263 https://cve.radiocsirt.org/vuln/cisco-sa-salt-2vx545ag <p>On April 29, 2020, the Salt Open Core team notified their community regarding the following two CVE-IDs: CVE-2020-11651: Authentication Bypass Vulnerability CVE-2020-11652: Directory Traversal Vulnerability Cisco Modeling Labs Corporate Edition (CML), Cisco TelePresence IX5000 Series, and Cisco Virtual Internet Routing Lab Personal Edition (VIRL-PE) incorporate a version of SaltStack that is running the salt-master service that is affected by these vulnerabilities. Cisco has released software updates that address these vulnerabilities. There are workarounds that address these vulnerabilities.</p> <p>On April 29, 2020, the Salt Open Core team notified their community regarding the following two CVE-IDs: CVE-2020-11651: Authentication Bypass Vulnerability CVE-2020-11652: Directory Traversal Vulnerability Cisco Modeling Labs Corporate Edition (CML), Cisco TelePresence IX5000 Series, and Cisco Virtual Internet Routing Lab Personal Edition (VIRL-PE) incorporate a version of SaltStack that is running the salt-master service that is affected by these vulnerabilities. Cisco has released software updates that address these vulnerabilities. There are workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-salt-2vx545ag https://cve.radiocsirt.org/vuln/cnvd-2020-26253 cnvd-2020-26253 https://cve.radiocsirt.org/vuln/cnvd-2020-26253 https://cve.radiocsirt.org/vuln/euvd-2026-256105 EUVD-2026-256105 https://cve.radiocsirt.org/vuln/euvd-2026-256105 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11652 <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11652 https://cve.radiocsirt.org/vuln/ghsa-vp49-2g4r-m3x3 <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.</p> <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.</p> https://cve.radiocsirt.org/vuln/ghsa-vp49-2g4r-m3x3 https://cve.radiocsirt.org/vuln/gsd-2020-11652 gsd-2020-11652 https://cve.radiocsirt.org/vuln/gsd-2020-11652 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0564-1 <p>Security update for salt</p> <p>Security update for salt</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0564-1 https://cve.radiocsirt.org/vuln/pysec-2020-103 <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.</p> <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.</p> https://cve.radiocsirt.org/vuln/pysec-2020-103 https://cve.radiocsirt.org/vuln/suse-su-2020:1147-1 <p>Security update for salt</p> <p>Security update for salt</p> https://cve.radiocsirt.org/vuln/suse-su-2020:1147-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11652 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: salt, Ubuntu:16.04:LTS: salt, Ubuntu:18.04:LTS: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: salt, Ubuntu:16.04:LTS: salt, Ubuntu:18.04:LTS: salt</p> <p>An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11652 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1449 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Administratorrechte zu erlangen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1449