https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:50:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-237380 EUVD-2026-237380 https://cve.radiocsirt.org/vuln/euvd-2026-237380 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22941 <p>An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.</p> <p>An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-22941 https://cve.radiocsirt.org/vuln/ghsa-qcr3-hr2f-6557 <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.</p> <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.</p> https://cve.radiocsirt.org/vuln/ghsa-qcr3-hr2f-6557 https://cve.radiocsirt.org/vuln/gsd-2022-22941 gsd-2022-22941 https://cve.radiocsirt.org/vuln/gsd-2022-22941 https://cve.radiocsirt.org/vuln/opensuse-su-2022:1059-1 <p>Security update for salt</p> <p>Security update for salt</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:1059-1 https://cve.radiocsirt.org/vuln/pysec-2022-174 <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.</p> <p><strong>Affected:</strong> PyPI: salt</p> <p>An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.</p> https://cve.radiocsirt.org/vuln/pysec-2022-174 https://cve.radiocsirt.org/vuln/suse-fu-2022:2042-1 <p>Feature update for SUSE Manager Salt Bundle</p> <p>Feature update for SUSE Manager Salt Bundle</p> https://cve.radiocsirt.org/vuln/suse-fu-2022:2042-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22941 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: salt</p> <p>An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: salt</p> <p>An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22941 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2843 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen, Privilegien zu erweitern oder beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen, Privilegien zu erweitern oder beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2843