Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/salt@2016.3.8
Typepypi
Namespace
Namesalt
Version2016.3.8
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3005.2
Latest_non_vulnerable_version3007.9
Affected_by_vulnerabilities
0
url VCID-47u4-vdsp-c3ct
vulnerability_id VCID-47u4-vdsp-c3ct
summary An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22004.json
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22004.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22004
reference_id
reference_type
scores
0
value 0.0014
scoring_system epss
scoring_elements 0.33796
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22004
2
reference_url https://github.com/advisories/GHSA-xf37-qcvf-7m57
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-xf37-qcvf-7m57
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-346.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-346.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22004
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-22004
12
reference_url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02
13
reference_url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2041836
reference_id 2041836
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2041836
fixed_packages
0
url pkg:pypi/salt@3003.3
purl pkg:pypi/salt@3003.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3
aliases CVE-2021-22004, GHSA-xf37-qcvf-7m57, PYSEC-2021-346
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-47u4-vdsp-c3ct
1
url VCID-48tt-fe7z-ybfb
vulnerability_id VCID-48tt-fe7z-ybfb
summary SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL module for Salt. The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-1010259
reference_id
reference_type
scores
0
value 0.00363
scoring_system epss
scoring_elements 0.58645
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-1010259
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2019-119.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2019-119.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534
4
reference_url https://github.com/saltstack/salt/pull/51462
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/pull/51462
5
reference_url https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-1010259
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-1010259
fixed_packages
0
url pkg:pypi/salt@2018.3.4
purl pkg:pypi/salt@2018.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-7mam-gwcp-8kdm
8
vulnerability VCID-8mpz-ke16-fbej
9
vulnerability VCID-a8kw-uehx-xfg5
10
vulnerability VCID-ce2x-ehyk-nufk
11
vulnerability VCID-cubj-wrbp-1qbu
12
vulnerability VCID-e8qc-mktf-gyam
13
vulnerability VCID-gafc-bb59-9yhb
14
vulnerability VCID-h4tm-9wqz-1qge
15
vulnerability VCID-j5th-837s-fkft
16
vulnerability VCID-jbea-m4ak-tqd7
17
vulnerability VCID-jyxg-h3a9-8ygv
18
vulnerability VCID-k1gu-khda-jyeb
19
vulnerability VCID-mbpz-g2vs-tqc1
20
vulnerability VCID-neby-tsrt-ryg5
21
vulnerability VCID-nehw-r7zm-j7bb
22
vulnerability VCID-p4xa-ks7v-wbay
23
vulnerability VCID-saff-gz5j-8kex
24
vulnerability VCID-v43a-k2bg-wkbz
25
vulnerability VCID-w2qv-hbsf-xyfh
26
vulnerability VCID-znn9-qud3-wqat
27
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.4
aliases CVE-2019-1010259, GHSA-h8xp-h3jf-wv4v, PYSEC-2019-119
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-48tt-fe7z-ybfb
2
url VCID-7mam-gwcp-8kdm
vulnerability_id VCID-7mam-gwcp-8kdm
summary An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
2
reference_url http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
3
reference_url http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11651.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11651.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-11651
reference_id
reference_type
scores
0
value 0.94234
scoring_system epss
scoring_elements 0.9993
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-11651
6
reference_url https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html
reference_id
reference_type
scores
url https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-102.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-102.yaml
8
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
9
reference_url https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst
10
reference_url https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-11651
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-11651
12
reference_url https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG
13
reference_url https://usn.ubuntu.com/4459-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4459-1
14
reference_url https://usn.ubuntu.com/4459-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4459-1/
15
reference_url https://www.debian.org/security/2020/dsa-4676
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2020/dsa-4676
16
reference_url http://www.vmware.com/security/advisories/VMSA-2020-0009.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/security/advisories/VMSA-2020-0009.html
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1832474
reference_id 1832474
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1832474
18
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/48421.txt
reference_id CVE-2020-11652;CVE-2020-11651
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/48421.txt
fixed_packages
0
url pkg:pypi/salt@2019.2.4
purl pkg:pypi/salt@2019.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-cubj-wrbp-1qbu
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-j5th-837s-fkft
13
vulnerability VCID-jbea-m4ak-tqd7
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-mbpz-g2vs-tqc1
17
vulnerability VCID-neby-tsrt-ryg5
18
vulnerability VCID-nehw-r7zm-j7bb
19
vulnerability VCID-p4xa-ks7v-wbay
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-v43a-k2bg-wkbz
22
vulnerability VCID-w2qv-hbsf-xyfh
23
vulnerability VCID-znn9-qud3-wqat
24
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.4
1
url pkg:pypi/salt@3000.2
purl pkg:pypi/salt@3000.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-cubj-wrbp-1qbu
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-j5th-837s-fkft
13
vulnerability VCID-jbea-m4ak-tqd7
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-mbpz-g2vs-tqc1
17
vulnerability VCID-neby-tsrt-ryg5
18
vulnerability VCID-nehw-r7zm-j7bb
19
vulnerability VCID-p4xa-ks7v-wbay
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-v43a-k2bg-wkbz
22
vulnerability VCID-w2qv-hbsf-xyfh
23
vulnerability VCID-znn9-qud3-wqat
24
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.2
aliases CVE-2020-11651, GHSA-pjhf-vpx3-33r3, PYSEC-2020-102
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7mam-gwcp-8kdm
3
url VCID-8mpz-ke16-fbej
vulnerability_id VCID-8mpz-ke16-fbej
summary An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22935
reference_id
reference_type
scores
0
value 0.0007
scoring_system epss
scoring_elements 0.21551
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22935
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-172.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-172.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L31
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L31
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L29
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L29
6
reference_url https://github.com/saltstack/salt/releases,
reference_id
reference_type
scores
url https://github.com/saltstack/salt/releases,
7
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
8
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-release
9
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release/,
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-release/,
10
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22935
reference_id CVE-2022-22935
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22935
12
reference_url https://github.com/advisories/GHSA-cvcc-5x92-gmhc
reference_id GHSA-cvcc-5x92-gmhc
reference_type
scores
url https://github.com/advisories/GHSA-cvcc-5x92-gmhc
fixed_packages
0
url pkg:pypi/salt@3002.8
purl pkg:pypi/salt@3002.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-a8kw-uehx-xfg5
3
vulnerability VCID-ce2x-ehyk-nufk
4
vulnerability VCID-h4tm-9wqz-1qge
5
vulnerability VCID-nehw-r7zm-j7bb
6
vulnerability VCID-saff-gz5j-8kex
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8
1
url pkg:pypi/salt@3003.4
purl pkg:pypi/salt@3003.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4
2
url pkg:pypi/salt@3004.1
purl pkg:pypi/salt@3004.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1
aliases CVE-2022-22935, GHSA-cvcc-5x92-gmhc, PYSEC-2022-172
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8mpz-ke16-fbej
4
url VCID-a8kw-uehx-xfg5
vulnerability_id VCID-a8kw-uehx-xfg5
summary An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21996.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21996.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21996
reference_id
reference_type
scores
0
value 0.02263
scoring_system epss
scoring_elements 0.84929
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21996
2
reference_url https://github.com/advisories/GHSA-pf7h-h2wq-m7pg
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-pf7h-h2wq-m7pg
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-318.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-318.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html
6
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
16
reference_url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02
17
reference_url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
18
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
19
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2041838
reference_id 2041838
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2041838
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21996
reference_id CVE-2021-21996
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21996
fixed_packages
0
url pkg:pypi/salt@3003.3
purl pkg:pypi/salt@3003.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3
aliases CVE-2021-21996, GHSA-pf7h-h2wq-m7pg, PYSEC-2021-318
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a8kw-uehx-xfg5
5
url VCID-ce2x-ehyk-nufk
vulnerability_id VCID-ce2x-ehyk-nufk
summary Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-20898
reference_id
reference_type
scores
0
value 0.0011
scoring_system epss
scoring_elements 0.28962
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-20898
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
4
reference_url https://saltproject.io/security-announcements/2023-08-10-advisory
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security-announcements/2023-08-10-advisory
5
reference_url https://saltproject.io/security-announcements/2023-08-10-advisory/
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
url https://saltproject.io/security-announcements/2023-08-10-advisory/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-20898
reference_id CVE-2023-20898
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-20898
7
reference_url https://github.com/advisories/GHSA-qvh6-3j7x-3hq7
reference_id GHSA-qvh6-3j7x-3hq7
reference_type
scores
url https://github.com/advisories/GHSA-qvh6-3j7x-3hq7
8
reference_url https://security.gentoo.org/glsa/202412-09
reference_id GLSA-202412-09
reference_type
scores
url https://security.gentoo.org/glsa/202412-09
fixed_packages
0
url pkg:pypi/salt@3005.2
purl pkg:pypi/salt@3005.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.2
1
url pkg:pypi/salt@3006.2
purl pkg:pypi/salt@3006.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2
aliases CVE-2023-20898, GHSA-qvh6-3j7x-3hq7, PYSEC-2023-169
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ce2x-ehyk-nufk
6
url VCID-e6kv-phwy-vfef
vulnerability_id VCID-e6kv-phwy-vfef
summary SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15751.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15751.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-15751
reference_id
reference_type
scores
0
value 0.00556
scoring_system epss
scoring_elements 0.68496
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-15751
3
reference_url https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html
4
reference_url https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-30.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-30.yaml
6
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L13
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L13
8
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L26
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L26
9
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L56
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L56
10
reference_url https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ
11
reference_url https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ
12
reference_url https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html
13
reference_url https://usn.ubuntu.com/4459-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4459-1
14
reference_url https://usn.ubuntu.com/4459-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4459-1/
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644489
reference_id 1644489
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644489
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-15751
reference_id CVE-2018-15751
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-15751
17
reference_url https://github.com/advisories/GHSA-x549-r7m8-gv63
reference_id GHSA-x549-r7m8-gv63
reference_type
scores
url https://github.com/advisories/GHSA-x549-r7m8-gv63
fixed_packages
0
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
1
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
2
url pkg:pypi/salt@2018.3.3
purl pkg:pypi/salt@2018.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-cubj-wrbp-1qbu
13
vulnerability VCID-e8qc-mktf-gyam
14
vulnerability VCID-gafc-bb59-9yhb
15
vulnerability VCID-h4tm-9wqz-1qge
16
vulnerability VCID-j5th-837s-fkft
17
vulnerability VCID-jbea-m4ak-tqd7
18
vulnerability VCID-jyxg-h3a9-8ygv
19
vulnerability VCID-k1gu-khda-jyeb
20
vulnerability VCID-mbpz-g2vs-tqc1
21
vulnerability VCID-neby-tsrt-ryg5
22
vulnerability VCID-nehw-r7zm-j7bb
23
vulnerability VCID-p4xa-ks7v-wbay
24
vulnerability VCID-saff-gz5j-8kex
25
vulnerability VCID-v43a-k2bg-wkbz
26
vulnerability VCID-w2qv-hbsf-xyfh
27
vulnerability VCID-znn9-qud3-wqat
28
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.3
aliases CVE-2018-15751, GHSA-x549-r7m8-gv63, PYSEC-2018-30
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e6kv-phwy-vfef
7
url VCID-e8qc-mktf-gyam
vulnerability_id VCID-e8qc-mktf-gyam
summary In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17361.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17361.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-17361
reference_id
reference_type
scores
0
value 0.17854
scoring_system epss
scoring_elements 0.95261
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-17361
3
reference_url https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-177.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-177.yaml
5
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
6
reference_url https://github.com/saltstack/salt/commits/master
reference_id
reference_type
scores
url https://github.com/saltstack/salt/commits/master
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-17361
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-17361
8
reference_url https://usn.ubuntu.com/4459-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4459-1
9
reference_url https://usn.ubuntu.com/4459-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4459-1/
10
reference_url https://www.debian.org/security/2020/dsa-4676
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2020/dsa-4676
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1796636
reference_id 1796636
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1796636
fixed_packages
0
url pkg:pypi/salt@2019.2.1
purl pkg:pypi/salt@2019.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-7mam-gwcp-8kdm
8
vulnerability VCID-8mpz-ke16-fbej
9
vulnerability VCID-a8kw-uehx-xfg5
10
vulnerability VCID-ce2x-ehyk-nufk
11
vulnerability VCID-cubj-wrbp-1qbu
12
vulnerability VCID-gafc-bb59-9yhb
13
vulnerability VCID-h4tm-9wqz-1qge
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-mbpz-g2vs-tqc1
19
vulnerability VCID-neby-tsrt-ryg5
20
vulnerability VCID-nehw-r7zm-j7bb
21
vulnerability VCID-p4xa-ks7v-wbay
22
vulnerability VCID-saff-gz5j-8kex
23
vulnerability VCID-v43a-k2bg-wkbz
24
vulnerability VCID-w2qv-hbsf-xyfh
25
vulnerability VCID-znn9-qud3-wqat
26
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.1
1
url pkg:pypi/salt@2019.2.3
purl pkg:pypi/salt@2019.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-7mam-gwcp-8kdm
8
vulnerability VCID-8mpz-ke16-fbej
9
vulnerability VCID-a8kw-uehx-xfg5
10
vulnerability VCID-ce2x-ehyk-nufk
11
vulnerability VCID-cubj-wrbp-1qbu
12
vulnerability VCID-gafc-bb59-9yhb
13
vulnerability VCID-h4tm-9wqz-1qge
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-mbpz-g2vs-tqc1
19
vulnerability VCID-neby-tsrt-ryg5
20
vulnerability VCID-nehw-r7zm-j7bb
21
vulnerability VCID-p4xa-ks7v-wbay
22
vulnerability VCID-saff-gz5j-8kex
23
vulnerability VCID-v43a-k2bg-wkbz
24
vulnerability VCID-w2qv-hbsf-xyfh
25
vulnerability VCID-znn9-qud3-wqat
26
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.3
aliases CVE-2019-17361, GHSA-q53j-p6r2-g2v4, PYSEC-2020-177
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e8qc-mktf-gyam
8
url VCID-gafc-bb59-9yhb
vulnerability_id VCID-gafc-bb59-9yhb
summary An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
2
reference_url http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
3
reference_url http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11652.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11652.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-11652
reference_id
reference_type
scores
0
value 0.93683
scoring_system epss
scoring_elements 0.99855
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-11652
6
reference_url https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-103.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-103.yaml
8
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
9
reference_url https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst
10
reference_url https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-11652
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-11652
12
reference_url https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG
13
reference_url http://support.blackberry.com/kb/articleDetail?articleNumber=000063758
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://support.blackberry.com/kb/articleDetail?articleNumber=000063758
14
reference_url https://usn.ubuntu.com/4459-1
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4459-1
15
reference_url https://usn.ubuntu.com/4459-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4459-1/
16
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11652
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11652
17
reference_url https://www.debian.org/security/2020/dsa-4676
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2020/dsa-4676
18
reference_url http://www.vmware.com/security/advisories/VMSA-2020-0009.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/security/advisories/VMSA-2020-0009.html
19
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1832420
reference_id 1832420
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1832420
fixed_packages
0
url pkg:pypi/salt@2019.2.4
purl pkg:pypi/salt@2019.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-cubj-wrbp-1qbu
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-j5th-837s-fkft
13
vulnerability VCID-jbea-m4ak-tqd7
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-mbpz-g2vs-tqc1
17
vulnerability VCID-neby-tsrt-ryg5
18
vulnerability VCID-nehw-r7zm-j7bb
19
vulnerability VCID-p4xa-ks7v-wbay
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-v43a-k2bg-wkbz
22
vulnerability VCID-w2qv-hbsf-xyfh
23
vulnerability VCID-znn9-qud3-wqat
24
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.4
1
url pkg:pypi/salt@3000.2
purl pkg:pypi/salt@3000.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-cubj-wrbp-1qbu
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-j5th-837s-fkft
13
vulnerability VCID-jbea-m4ak-tqd7
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-mbpz-g2vs-tqc1
17
vulnerability VCID-neby-tsrt-ryg5
18
vulnerability VCID-nehw-r7zm-j7bb
19
vulnerability VCID-p4xa-ks7v-wbay
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-v43a-k2bg-wkbz
22
vulnerability VCID-w2qv-hbsf-xyfh
23
vulnerability VCID-znn9-qud3-wqat
24
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.2
aliases CVE-2020-11652, GHSA-vp49-2g4r-m3x3, PYSEC-2020-103
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gafc-bb59-9yhb
9
url VCID-h4tm-9wqz-1qge
vulnerability_id VCID-h4tm-9wqz-1qge
summary An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22967
reference_id
reference_type
scores
0
value 0.00504
scoring_system epss
scoring_elements 0.66531
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22967
1
reference_url https://github.com/advisories/GHSA-fpxm-fprw-6hxj
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-fpxm-fprw-6hxj
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22967
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22967
5
reference_url https://repo.saltproject.io
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://repo.saltproject.io
6
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
7
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/,
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/,
8
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
fixed_packages
0
url pkg:pypi/salt@3002.9
purl pkg:pypi/salt@3002.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-a8kw-uehx-xfg5
3
vulnerability VCID-ce2x-ehyk-nufk
4
vulnerability VCID-nehw-r7zm-j7bb
5
vulnerability VCID-saff-gz5j-8kex
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.9
1
url pkg:pypi/salt@3003.5
purl pkg:pypi/salt@3003.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.5
2
url pkg:pypi/salt@3004.2
purl pkg:pypi/salt@3004.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.2
aliases CVE-2022-22967, GHSA-fpxm-fprw-6hxj, PYSEC-2022-210
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h4tm-9wqz-1qge
10
url VCID-hgv6-czxs-cfbc
vulnerability_id VCID-hgv6-czxs-cfbc
summary Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12791.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12791.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12791
reference_id
reference_type
scores
0
value 0.00924
scoring_system epss
scoring_elements 0.7639
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12791
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872399
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872399
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1482006
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1482006
4
reference_url https://docs.saltstack.com/en/2016.11/topics/releases/2016.11.7.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/2016.11/topics/releases/2016.11.7.html
5
reference_url https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html
6
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-151.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-151.yaml
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-35.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-35.yaml
8
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
9
reference_url https://github.com/saltstack/salt/pull/42944
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/pull/42944
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-12791
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-12791
11
reference_url http://www.securityfocus.com/bid/100384
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url http://www.securityfocus.com/bid/100384
fixed_packages
0
url pkg:pypi/salt@2016.11.7
purl pkg:pypi/salt@2016.11.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-58p2-6c4u-tybp
6
vulnerability VCID-5hr1-5aec-43h3
7
vulnerability VCID-65p4-5x86-y3fj
8
vulnerability VCID-6cfw-9xe8-43d6
9
vulnerability VCID-7mam-gwcp-8kdm
10
vulnerability VCID-8mpz-ke16-fbej
11
vulnerability VCID-a8kw-uehx-xfg5
12
vulnerability VCID-ce2x-ehyk-nufk
13
vulnerability VCID-cubj-wrbp-1qbu
14
vulnerability VCID-e6kv-phwy-vfef
15
vulnerability VCID-e8qc-mktf-gyam
16
vulnerability VCID-gafc-bb59-9yhb
17
vulnerability VCID-h4tm-9wqz-1qge
18
vulnerability VCID-j5th-837s-fkft
19
vulnerability VCID-jbea-m4ak-tqd7
20
vulnerability VCID-jyxg-h3a9-8ygv
21
vulnerability VCID-k1gu-khda-jyeb
22
vulnerability VCID-kapu-yvhn-ybhw
23
vulnerability VCID-mbpz-g2vs-tqc1
24
vulnerability VCID-neby-tsrt-ryg5
25
vulnerability VCID-nehw-r7zm-j7bb
26
vulnerability VCID-p4xa-ks7v-wbay
27
vulnerability VCID-qgqk-f1g2-7fbz
28
vulnerability VCID-saff-gz5j-8kex
29
vulnerability VCID-v43a-k2bg-wkbz
30
vulnerability VCID-w2qv-hbsf-xyfh
31
vulnerability VCID-znn9-qud3-wqat
32
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.7
1
url pkg:pypi/salt@2017.7.1
purl pkg:pypi/salt@2017.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-58p2-6c4u-tybp
6
vulnerability VCID-5hr1-5aec-43h3
7
vulnerability VCID-65p4-5x86-y3fj
8
vulnerability VCID-6cfw-9xe8-43d6
9
vulnerability VCID-7mam-gwcp-8kdm
10
vulnerability VCID-8mpz-ke16-fbej
11
vulnerability VCID-a8kw-uehx-xfg5
12
vulnerability VCID-ce2x-ehyk-nufk
13
vulnerability VCID-cubj-wrbp-1qbu
14
vulnerability VCID-e6kv-phwy-vfef
15
vulnerability VCID-e8qc-mktf-gyam
16
vulnerability VCID-gafc-bb59-9yhb
17
vulnerability VCID-h4tm-9wqz-1qge
18
vulnerability VCID-j5th-837s-fkft
19
vulnerability VCID-jbea-m4ak-tqd7
20
vulnerability VCID-jyxg-h3a9-8ygv
21
vulnerability VCID-k1gu-khda-jyeb
22
vulnerability VCID-kapu-yvhn-ybhw
23
vulnerability VCID-mbpz-g2vs-tqc1
24
vulnerability VCID-neby-tsrt-ryg5
25
vulnerability VCID-nehw-r7zm-j7bb
26
vulnerability VCID-p4xa-ks7v-wbay
27
vulnerability VCID-qgqk-f1g2-7fbz
28
vulnerability VCID-saff-gz5j-8kex
29
vulnerability VCID-v43a-k2bg-wkbz
30
vulnerability VCID-w2qv-hbsf-xyfh
31
vulnerability VCID-znn9-qud3-wqat
32
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.1
aliases CVE-2017-12791, GHSA-xxvj-8g5m-4qgw, PYSEC-2017-151, PYSEC-2017-35
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hgv6-czxs-cfbc
11
url VCID-jyxg-h3a9-8ygv
vulnerability_id VCID-jyxg-h3a9-8ygv
summary An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22941
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03576
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22941
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
6
reference_url https://github.com/saltstack/salt/releases,
reference_id
reference_type
scores
url https://github.com/saltstack/salt/releases,
7
reference_url https://repo.saltproject.io
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://repo.saltproject.io
8
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
9
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release/,
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-release/,
10
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22941
reference_id CVE-2022-22941
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22941
12
reference_url https://github.com/advisories/GHSA-qcr3-hr2f-6557
reference_id GHSA-qcr3-hr2f-6557
reference_type
scores
url https://github.com/advisories/GHSA-qcr3-hr2f-6557
fixed_packages
0
url pkg:pypi/salt@3002.8
purl pkg:pypi/salt@3002.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-a8kw-uehx-xfg5
3
vulnerability VCID-ce2x-ehyk-nufk
4
vulnerability VCID-h4tm-9wqz-1qge
5
vulnerability VCID-nehw-r7zm-j7bb
6
vulnerability VCID-saff-gz5j-8kex
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8
1
url pkg:pypi/salt@3003.4
purl pkg:pypi/salt@3003.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4
2
url pkg:pypi/salt@3004.1
purl pkg:pypi/salt@3004.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1
aliases CVE-2022-22941, GHSA-qcr3-hr2f-6557, PYSEC-2022-174
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jyxg-h3a9-8ygv
12
url VCID-k1gu-khda-jyeb
vulnerability_id VCID-k1gu-khda-jyeb
summary An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22934
reference_id
reference_type
scores
0
value 0.0012
scoring_system epss
scoring_elements 0.30538
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22934
1
reference_url https://blog.cloudflare.com/future-proofing-saltstack
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://blog.cloudflare.com/future-proofing-saltstack
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-171.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-171.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
5
reference_url https://github.com/saltstack/salt/releases,
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases,
6
reference_url https://repo.saltproject.io
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://repo.saltproject.io
7
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
8
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release/,
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-release/,
9
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22934
reference_id CVE-2022-22934
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22934
11
reference_url https://github.com/advisories/GHSA-2q4g-wfm6-5fpm
reference_id GHSA-2q4g-wfm6-5fpm
reference_type
scores
url https://github.com/advisories/GHSA-2q4g-wfm6-5fpm
fixed_packages
0
url pkg:pypi/salt@3002.8
purl pkg:pypi/salt@3002.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-a8kw-uehx-xfg5
3
vulnerability VCID-ce2x-ehyk-nufk
4
vulnerability VCID-h4tm-9wqz-1qge
5
vulnerability VCID-nehw-r7zm-j7bb
6
vulnerability VCID-saff-gz5j-8kex
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8
1
url pkg:pypi/salt@3003.4
purl pkg:pypi/salt@3003.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4
2
url pkg:pypi/salt@3004.1
purl pkg:pypi/salt@3004.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1
aliases CVE-2022-22934, GHSA-2q4g-wfm6-5fpm, PYSEC-2022-171
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k1gu-khda-jyeb
13
url VCID-nehw-r7zm-j7bb
vulnerability_id VCID-nehw-r7zm-j7bb
summary Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-20897
reference_id
reference_type
scores
0
value 0.00175
scoring_system epss
scoring_elements 0.38746
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-20897
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
4
reference_url https://saltproject.io/security-announcements/2023-08-10-advisory
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security-announcements/2023-08-10-advisory
5
reference_url https://saltproject.io/security-announcements/2023-08-10-advisory/
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://saltproject.io/security-announcements/2023-08-10-advisory/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-20897
reference_id CVE-2023-20897
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-20897
7
reference_url https://github.com/advisories/GHSA-vpjg-wmf8-29h9
reference_id GHSA-vpjg-wmf8-29h9
reference_type
scores
url https://github.com/advisories/GHSA-vpjg-wmf8-29h9
8
reference_url https://security.gentoo.org/glsa/202412-09
reference_id GLSA-202412-09
reference_type
scores
url https://security.gentoo.org/glsa/202412-09
fixed_packages
0
url pkg:pypi/salt@3005.2
purl pkg:pypi/salt@3005.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.2
1
url pkg:pypi/salt@3006.2
purl pkg:pypi/salt@3006.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2
aliases CVE-2023-20897, GHSA-vpjg-wmf8-29h9, PYSEC-2023-166
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nehw-r7zm-j7bb
14
url VCID-qgqk-f1g2-7fbz
vulnerability_id VCID-qgqk-f1g2-7fbz
summary Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15750.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15750.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-15750
reference_id
reference_type
scores
0
value 0.00912
scoring_system epss
scoring_elements 0.76234
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-15750
3
reference_url https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html
4
reference_url https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-29.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-29.yaml
6
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L15
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L15
8
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L28
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L28
9
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L58
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L58
10
reference_url https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ
11
reference_url https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ
12
reference_url https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html
13
reference_url https://usn.ubuntu.com/4459-1
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4459-1
14
reference_url https://usn.ubuntu.com/4459-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4459-1/
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644484
reference_id 1644484
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644484
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-15750
reference_id CVE-2018-15750
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-15750
17
reference_url https://github.com/advisories/GHSA-jx34-pppm-gjvr
reference_id GHSA-jx34-pppm-gjvr
reference_type
scores
url https://github.com/advisories/GHSA-jx34-pppm-gjvr
fixed_packages
0
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
1
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
2
url pkg:pypi/salt@2018.3.3
purl pkg:pypi/salt@2018.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-cubj-wrbp-1qbu
13
vulnerability VCID-e8qc-mktf-gyam
14
vulnerability VCID-gafc-bb59-9yhb
15
vulnerability VCID-h4tm-9wqz-1qge
16
vulnerability VCID-j5th-837s-fkft
17
vulnerability VCID-jbea-m4ak-tqd7
18
vulnerability VCID-jyxg-h3a9-8ygv
19
vulnerability VCID-k1gu-khda-jyeb
20
vulnerability VCID-mbpz-g2vs-tqc1
21
vulnerability VCID-neby-tsrt-ryg5
22
vulnerability VCID-nehw-r7zm-j7bb
23
vulnerability VCID-p4xa-ks7v-wbay
24
vulnerability VCID-saff-gz5j-8kex
25
vulnerability VCID-v43a-k2bg-wkbz
26
vulnerability VCID-w2qv-hbsf-xyfh
27
vulnerability VCID-znn9-qud3-wqat
28
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.3
aliases CVE-2018-15750, GHSA-jx34-pppm-gjvr, PYSEC-2018-29
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qgqk-f1g2-7fbz
15
url VCID-saff-gz5j-8kex
vulnerability_id VCID-saff-gz5j-8kex
summary Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33226
reference_id
reference_type
scores
0
value 0.04007
scoring_system epss
scoring_elements 0.88646
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33226
1
reference_url https://github.com/saltstack/salt/blob/master/salt/modules/status.py
reference_id
reference_type
scores
url https://github.com/saltstack/salt/blob/master/salt/modules/status.py
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33226
reference_id CVE-2021-33226
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-33226
fixed_packages
0
url pkg:pypi/salt@3003.1
purl pkg:pypi/salt@3003.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-a8kw-uehx-xfg5
2
vulnerability VCID-ce2x-ehyk-nufk
3
vulnerability VCID-h4tm-9wqz-1qge
4
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.1
aliases CVE-2021-33226, PYSEC-2023-47
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-saff-gz5j-8kex
16
url VCID-znn9-qud3-wqat
vulnerability_id VCID-znn9-qud3-wqat
summary CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25315.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25315.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25315
reference_id
reference_type
scores
0
value 0.00153
scoring_system epss
scoring_elements 0.357
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25315
2
reference_url https://bugzilla.suse.com/show_bug.cgi?id=1182382
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.suse.com/show_bug.cgi?id=1182382
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-25315
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-25315
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1945077
reference_id 1945077
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1945077
fixed_packages
0
url pkg:pypi/salt@3002.2
purl pkg:pypi/salt@3002.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.2
aliases CVE-2021-25315, GHSA-pmj6-9f8c-8g2m, PYSEC-2021-891
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-znn9-qud3-wqat
17
url VCID-zter-3e3b-7yfb
vulnerability_id VCID-zter-3e3b-7yfb
summary An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A sufficient craft attacker could gain root access on minion under certain scenarios.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22936
reference_id
reference_type
scores
0
value 0.00107
scoring_system epss
scoring_elements 0.28526
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22936
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
6
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
7
reference_url https://github.com/saltstack/salt/releases,
reference_id
reference_type
scores
url https://github.com/saltstack/salt/releases,
8
reference_url https://repo.saltproject.io
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://repo.saltproject.io
9
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
10
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-release
11
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release/,
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-release/,
12
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22936
reference_id CVE-2022-22936
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22936
14
reference_url https://github.com/advisories/GHSA-5r3f-3m3j-wcj2
reference_id GHSA-5r3f-3m3j-wcj2
reference_type
scores
url https://github.com/advisories/GHSA-5r3f-3m3j-wcj2
fixed_packages
0
url pkg:pypi/salt@3002.8
purl pkg:pypi/salt@3002.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-a8kw-uehx-xfg5
3
vulnerability VCID-ce2x-ehyk-nufk
4
vulnerability VCID-h4tm-9wqz-1qge
5
vulnerability VCID-nehw-r7zm-j7bb
6
vulnerability VCID-saff-gz5j-8kex
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8
1
url pkg:pypi/salt@3003.4
purl pkg:pypi/salt@3003.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4
2
url pkg:pypi/salt@3004.1
purl pkg:pypi/salt@3004.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce2x-ehyk-nufk
1
vulnerability VCID-h4tm-9wqz-1qge
2
vulnerability VCID-nehw-r7zm-j7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1
aliases CVE-2022-22936, GHSA-5r3f-3m3j-wcj2, PYSEC-2022-173
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zter-3e3b-7yfb
Fixing_vulnerabilities
0
url VCID-2ds7-ga65-r3b6
vulnerability_id VCID-2ds7-ga65-r3b6
summary An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3148.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3148.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3148
reference_id
reference_type
scores
0
value 0.07332
scoring_system epss
scoring_elements 0.91836
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3148
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23
8
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
9
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3148
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3148
20
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
21
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
22
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
23
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
24
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933336
reference_id 1933336
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933336
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2021-3148, GHSA-ghc2-hx3w-jqmp, PYSEC-2021-55
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2ds7-ga65-r3b6
1
url VCID-2h9s-fgnc-1qeg
vulnerability_id VCID-2h9s-fgnc-1qeg
summary An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28243.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28243.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-28243
reference_id
reference_type
scores
0
value 0.01408
scoring_system epss
scoring_elements 0.80825
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-28243
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-73.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-73.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L12
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L12
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L12
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L12
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L12
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L12
7
reference_url https://github.com/stealthcopter/CVE-2020-28243
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/stealthcopter/CVE-2020-28243
8
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
9
reference_url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-28243
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-28243
20
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
21
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
22
reference_url https://sec.stealthcopter.com/cve-2020-28243
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://sec.stealthcopter.com/cve-2020-28243
23
reference_url https://sec.stealthcopter.com/cve-2020-28243/
reference_id
reference_type
scores
url https://sec.stealthcopter.com/cve-2020-28243/
24
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
25
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
26
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933350
reference_id 1933350
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933350
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2020-28243, GHSA-phhw-3wc9-8q75, PYSEC-2021-73
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2h9s-fgnc-1qeg
2
url VCID-58p2-6c4u-tybp
vulnerability_id VCID-58p2-6c4u-tybp
summary SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
1
reference_url http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14696.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14696.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14696
reference_id
reference_type
scores
0
value 0.01854
scoring_system epss
scoring_elements 0.83372
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14696
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500742
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1500742
5
reference_url https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html
6
reference_url https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html
7
reference_url https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html
8
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-37.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-37.yaml
9
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
10
reference_url https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-14696
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-14696
fixed_packages
0
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
1
url pkg:pypi/salt@2016.11.8
purl pkg:pypi/salt@2016.11.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-cubj-wrbp-1qbu
13
vulnerability VCID-e6kv-phwy-vfef
14
vulnerability VCID-e8qc-mktf-gyam
15
vulnerability VCID-gafc-bb59-9yhb
16
vulnerability VCID-h4tm-9wqz-1qge
17
vulnerability VCID-j5th-837s-fkft
18
vulnerability VCID-jbea-m4ak-tqd7
19
vulnerability VCID-jyxg-h3a9-8ygv
20
vulnerability VCID-k1gu-khda-jyeb
21
vulnerability VCID-mbpz-g2vs-tqc1
22
vulnerability VCID-neby-tsrt-ryg5
23
vulnerability VCID-nehw-r7zm-j7bb
24
vulnerability VCID-p4xa-ks7v-wbay
25
vulnerability VCID-qgqk-f1g2-7fbz
26
vulnerability VCID-saff-gz5j-8kex
27
vulnerability VCID-v43a-k2bg-wkbz
28
vulnerability VCID-w2qv-hbsf-xyfh
29
vulnerability VCID-znn9-qud3-wqat
30
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.8
2
url pkg:pypi/salt@2017.7.2
purl pkg:pypi/salt@2017.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-cubj-wrbp-1qbu
13
vulnerability VCID-e6kv-phwy-vfef
14
vulnerability VCID-e8qc-mktf-gyam
15
vulnerability VCID-gafc-bb59-9yhb
16
vulnerability VCID-h4tm-9wqz-1qge
17
vulnerability VCID-j5th-837s-fkft
18
vulnerability VCID-jbea-m4ak-tqd7
19
vulnerability VCID-jyxg-h3a9-8ygv
20
vulnerability VCID-k1gu-khda-jyeb
21
vulnerability VCID-mbpz-g2vs-tqc1
22
vulnerability VCID-neby-tsrt-ryg5
23
vulnerability VCID-nehw-r7zm-j7bb
24
vulnerability VCID-p4xa-ks7v-wbay
25
vulnerability VCID-qgqk-f1g2-7fbz
26
vulnerability VCID-saff-gz5j-8kex
27
vulnerability VCID-v43a-k2bg-wkbz
28
vulnerability VCID-w2qv-hbsf-xyfh
29
vulnerability VCID-znn9-qud3-wqat
30
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.2
aliases CVE-2017-14696, GHSA-657p-cj5r-mjrh, PYSEC-2017-37
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-58p2-6c4u-tybp
3
url VCID-5hr1-5aec-43h3
vulnerability_id VCID-5hr1-5aec-43h3
summary An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.
references
0
reference_url http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25282.json
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25282.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25282
reference_id
reference_type
scores
0
value 0.91286
scoring_system epss
scoring_elements 0.9967
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25282
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-51.yaml
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-51.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L31
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L31
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L31
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L31
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L31
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L31
8
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
9
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
10
reference_url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-25282
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-25282
21
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
22
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
23
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
24
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
25
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
1
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933327
reference_id 1933327
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933327
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2021-25282, GHSA-76x4-x3p6-rpr9, PYSEC-2021-51
risk_score 4.1
exploitability 0.5
weighted_severity 8.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5hr1-5aec-43h3
4
url VCID-65p4-5x86-y3fj
vulnerability_id VCID-65p4-5x86-y3fj
summary An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25283.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25283.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25283
reference_id
reference_type
scores
0
value 0.10038
scoring_system epss
scoring_elements 0.93204
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25283
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-52.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-52.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L34
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L34
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.5.rst#L12
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.5.rst#L12
6
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
7
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-25283
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-25283
18
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
19
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
20
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
21
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
22
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
23
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933331
reference_id 1933331
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933331
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2021-25283, GHSA-xgmh-gfxw-2hvv, PYSEC-2021-52
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-65p4-5x86-y3fj
5
url VCID-6cfw-9xe8-43d6
vulnerability_id VCID-6cfw-9xe8-43d6
summary In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35662.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35662.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-35662
reference_id
reference_type
scores
0
value 0.0075
scoring_system epss
scoring_elements 0.73501
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-35662
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-75.yaml
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-75.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L18
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L18
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L18
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L18
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L18
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L18
7
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-35662
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-35662
18
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
19
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
20
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
21
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
22
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
23
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933342
reference_id 1933342
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933342
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2020-35662, GHSA-qx72-q6w3-qgc7, PYSEC-2021-75
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6cfw-9xe8-43d6
6
url VCID-cubj-wrbp-1qbu
vulnerability_id VCID-cubj-wrbp-1qbu
summary An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html
1
reference_url http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16846.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16846.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-16846
reference_id
reference_type
scores
0
value 0.94387
scoring_system epss
scoring_elements 0.99972
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-16846
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-104.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-104.yaml
5
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.6.rst#L10
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.6.rst#L10
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.4.rst#L10
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.4.rst#L10
8
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.2.rst#L10
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.2.rst#L10
9
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L12
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L12
10
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
11
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html
12
reference_url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-16846
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-16846
17
reference_url https://security.gentoo.org/glsa/202011-13
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202011-13
18
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-16846
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-16846
19
reference_url https://www.debian.org/security/2021/dsa-4837
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4837
20
reference_url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves
21
reference_url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/
reference_id
reference_type
scores
url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/
22
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1379
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.zerodayinitiative.com/advisories/ZDI-20-1379
23
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1379/
reference_id
reference_type
scores
url https://www.zerodayinitiative.com/advisories/ZDI-20-1379/
24
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1380
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.zerodayinitiative.com/advisories/ZDI-20-1380
25
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1380/
reference_id
reference_type
scores
url https://www.zerodayinitiative.com/advisories/ZDI-20-1380/
26
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1381
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.zerodayinitiative.com/advisories/ZDI-20-1381
27
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1381/
reference_id
reference_type
scores
url https://www.zerodayinitiative.com/advisories/ZDI-20-1381/
28
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1382
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.zerodayinitiative.com/advisories/ZDI-20-1382
29
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1382/
reference_id
reference_type
scores
url https://www.zerodayinitiative.com/advisories/ZDI-20-1382/
30
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1383
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.zerodayinitiative.com/advisories/ZDI-20-1383
31
reference_url https://www.zerodayinitiative.com/advisories/ZDI-20-1383/
reference_id
reference_type
scores
url https://www.zerodayinitiative.com/advisories/ZDI-20-1383/
32
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1895449
reference_id 1895449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1895449
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.6
purl pkg:pypi/salt@2016.11.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.6
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.4
purl pkg:pypi/salt@2017.7.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-e6kv-phwy-vfef
13
vulnerability VCID-e8qc-mktf-gyam
14
vulnerability VCID-gafc-bb59-9yhb
15
vulnerability VCID-h4tm-9wqz-1qge
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-mbpz-g2vs-tqc1
19
vulnerability VCID-neby-tsrt-ryg5
20
vulnerability VCID-nehw-r7zm-j7bb
21
vulnerability VCID-p4xa-ks7v-wbay
22
vulnerability VCID-qgqk-f1g2-7fbz
23
vulnerability VCID-saff-gz5j-8kex
24
vulnerability VCID-v43a-k2bg-wkbz
25
vulnerability VCID-w2qv-hbsf-xyfh
26
vulnerability VCID-znn9-qud3-wqat
27
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.4
9
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
10
url pkg:pypi/salt@2018.3.5
purl pkg:pypi/salt@2018.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-7mam-gwcp-8kdm
8
vulnerability VCID-8mpz-ke16-fbej
9
vulnerability VCID-a8kw-uehx-xfg5
10
vulnerability VCID-ce2x-ehyk-nufk
11
vulnerability VCID-e8qc-mktf-gyam
12
vulnerability VCID-gafc-bb59-9yhb
13
vulnerability VCID-h4tm-9wqz-1qge
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-mbpz-g2vs-tqc1
17
vulnerability VCID-neby-tsrt-ryg5
18
vulnerability VCID-nehw-r7zm-j7bb
19
vulnerability VCID-p4xa-ks7v-wbay
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-v43a-k2bg-wkbz
22
vulnerability VCID-w2qv-hbsf-xyfh
23
vulnerability VCID-znn9-qud3-wqat
24
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.5
11
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
12
url pkg:pypi/salt@2019.2.6
purl pkg:pypi/salt@2019.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.6
13
url pkg:pypi/salt@3000.3
purl pkg:pypi/salt@3000.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.3
14
url pkg:pypi/salt@3000.4
purl pkg:pypi/salt@3000.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.4
15
url pkg:pypi/salt@3001.2
purl pkg:pypi/salt@3001.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.2
16
url pkg:pypi/salt@3002.1
purl pkg:pypi/salt@3002.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.1
aliases CVE-2020-16846, GHSA-qr38-h96j-2j3w, PYSEC-2020-104
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cubj-wrbp-1qbu
7
url VCID-j5th-837s-fkft
vulnerability_id VCID-j5th-837s-fkft
summary In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html
1
reference_url http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25592.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25592.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25592
reference_id
reference_type
scores
0
value 0.44938
scoring_system epss
scoring_elements 0.97652
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25592
4
reference_url https://docs.saltstack.com/en/latest/topics/releases/index.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/index.html
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-106.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-106.yaml
6
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.7.rst#L12
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.7.rst#L12
8
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.5.rst#L12
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.5.rst#L12
9
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.3.rst#L12
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.3.rst#L12
10
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L14
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L14
11
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-25592
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-25592
15
reference_url https://security.gentoo.org/glsa/202011-13
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202011-13
16
reference_url https://www.debian.org/security/2021/dsa-4837
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4837
17
reference_url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves
18
reference_url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/
reference_id
reference_type
scores
url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/
19
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1895454
reference_id 1895454
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1895454
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.6
purl pkg:pypi/salt@2016.11.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.6
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.4
purl pkg:pypi/salt@2017.7.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-e6kv-phwy-vfef
13
vulnerability VCID-e8qc-mktf-gyam
14
vulnerability VCID-gafc-bb59-9yhb
15
vulnerability VCID-h4tm-9wqz-1qge
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-mbpz-g2vs-tqc1
19
vulnerability VCID-neby-tsrt-ryg5
20
vulnerability VCID-nehw-r7zm-j7bb
21
vulnerability VCID-p4xa-ks7v-wbay
22
vulnerability VCID-qgqk-f1g2-7fbz
23
vulnerability VCID-saff-gz5j-8kex
24
vulnerability VCID-v43a-k2bg-wkbz
25
vulnerability VCID-w2qv-hbsf-xyfh
26
vulnerability VCID-znn9-qud3-wqat
27
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.4
9
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
10
url pkg:pypi/salt@2018.3.5
purl pkg:pypi/salt@2018.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-7mam-gwcp-8kdm
8
vulnerability VCID-8mpz-ke16-fbej
9
vulnerability VCID-a8kw-uehx-xfg5
10
vulnerability VCID-ce2x-ehyk-nufk
11
vulnerability VCID-e8qc-mktf-gyam
12
vulnerability VCID-gafc-bb59-9yhb
13
vulnerability VCID-h4tm-9wqz-1qge
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-mbpz-g2vs-tqc1
17
vulnerability VCID-neby-tsrt-ryg5
18
vulnerability VCID-nehw-r7zm-j7bb
19
vulnerability VCID-p4xa-ks7v-wbay
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-v43a-k2bg-wkbz
22
vulnerability VCID-w2qv-hbsf-xyfh
23
vulnerability VCID-znn9-qud3-wqat
24
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.5
11
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
12
url pkg:pypi/salt@2019.2.7
purl pkg:pypi/salt@2019.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.7
13
url pkg:pypi/salt@3000.3
purl pkg:pypi/salt@3000.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.3
14
url pkg:pypi/salt@3000.5
purl pkg:pypi/salt@3000.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.5
15
url pkg:pypi/salt@3001.3
purl pkg:pypi/salt@3001.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.3
16
url pkg:pypi/salt@3002.1
purl pkg:pypi/salt@3002.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.1
aliases CVE-2020-25592, GHSA-29j3-2446-5j4w, PYSEC-2020-106
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j5th-837s-fkft
8
url VCID-jbea-m4ak-tqd7
vulnerability_id VCID-jbea-m4ak-tqd7
summary The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17490.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17490.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-17490
reference_id
reference_type
scores
0
value 0.00046
scoring_system epss
scoring_elements 0.14483
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-17490
3
reference_url https://docs.saltstack.com/en/latest/topics/releases/index.html#latest-branch-release
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/index.html#latest-branch-release
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-105.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-105.yaml
5
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.6.rst#L10
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.6.rst#L10
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.4.rst#L10
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.4.rst#L10
8
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.2.rst#L10
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.2.rst#L10
9
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L13
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L13
10
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-17490
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-17490
14
reference_url https://security.gentoo.org/glsa/202011-13
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202011-13
15
reference_url https://www.debian.org/security/2021/dsa-4837
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4837
16
reference_url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves
17
reference_url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/
reference_id
reference_type
scores
url https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1895451
reference_id 1895451
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1895451
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.6
purl pkg:pypi/salt@2016.11.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.6
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.4
purl pkg:pypi/salt@2017.7.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-e6kv-phwy-vfef
13
vulnerability VCID-e8qc-mktf-gyam
14
vulnerability VCID-gafc-bb59-9yhb
15
vulnerability VCID-h4tm-9wqz-1qge
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-mbpz-g2vs-tqc1
19
vulnerability VCID-neby-tsrt-ryg5
20
vulnerability VCID-nehw-r7zm-j7bb
21
vulnerability VCID-p4xa-ks7v-wbay
22
vulnerability VCID-qgqk-f1g2-7fbz
23
vulnerability VCID-saff-gz5j-8kex
24
vulnerability VCID-v43a-k2bg-wkbz
25
vulnerability VCID-w2qv-hbsf-xyfh
26
vulnerability VCID-znn9-qud3-wqat
27
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.4
9
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
10
url pkg:pypi/salt@2018.3.5
purl pkg:pypi/salt@2018.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-7mam-gwcp-8kdm
8
vulnerability VCID-8mpz-ke16-fbej
9
vulnerability VCID-a8kw-uehx-xfg5
10
vulnerability VCID-ce2x-ehyk-nufk
11
vulnerability VCID-e8qc-mktf-gyam
12
vulnerability VCID-gafc-bb59-9yhb
13
vulnerability VCID-h4tm-9wqz-1qge
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-mbpz-g2vs-tqc1
17
vulnerability VCID-neby-tsrt-ryg5
18
vulnerability VCID-nehw-r7zm-j7bb
19
vulnerability VCID-p4xa-ks7v-wbay
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-v43a-k2bg-wkbz
22
vulnerability VCID-w2qv-hbsf-xyfh
23
vulnerability VCID-znn9-qud3-wqat
24
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.5
11
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
12
url pkg:pypi/salt@2019.2.6
purl pkg:pypi/salt@2019.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.6
13
url pkg:pypi/salt@3000.3
purl pkg:pypi/salt@3000.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.3
14
url pkg:pypi/salt@3000.4
purl pkg:pypi/salt@3000.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.4
15
url pkg:pypi/salt@3001.2
purl pkg:pypi/salt@3001.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.2
16
url pkg:pypi/salt@3002.1
purl pkg:pypi/salt@3002.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.1
aliases CVE-2020-17490, GHSA-3c56-vx6v-q5vh, PYSEC-2020-105
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jbea-m4ak-tqd7
9
url VCID-kapu-yvhn-ybhw
vulnerability_id VCID-kapu-yvhn-ybhw
summary Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html
1
reference_url http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14695.json
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14695.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14695
reference_id
reference_type
scores
0
value 0.00331
scoring_system epss
scoring_elements 0.56273
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14695
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500748
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1500748
5
reference_url https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html
6
reference_url https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html
7
reference_url https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html
8
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-36.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-36.yaml
9
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
10
reference_url https://github.com/saltstack/salt/commit/80d90307b07b3703428ecbb7c8bb468e28a9ae6d
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/commit/80d90307b07b3703428ecbb7c8bb468e28a9ae6d
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-14695
reference_id CVE-2017-14695
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-14695
12
reference_url https://github.com/advisories/GHSA-j6gj-pg62-x8j6
reference_id GHSA-j6gj-pg62-x8j6
reference_type
scores
url https://github.com/advisories/GHSA-j6gj-pg62-x8j6
fixed_packages
0
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
1
url pkg:pypi/salt@2016.11.8
purl pkg:pypi/salt@2016.11.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-cubj-wrbp-1qbu
13
vulnerability VCID-e6kv-phwy-vfef
14
vulnerability VCID-e8qc-mktf-gyam
15
vulnerability VCID-gafc-bb59-9yhb
16
vulnerability VCID-h4tm-9wqz-1qge
17
vulnerability VCID-j5th-837s-fkft
18
vulnerability VCID-jbea-m4ak-tqd7
19
vulnerability VCID-jyxg-h3a9-8ygv
20
vulnerability VCID-k1gu-khda-jyeb
21
vulnerability VCID-mbpz-g2vs-tqc1
22
vulnerability VCID-neby-tsrt-ryg5
23
vulnerability VCID-nehw-r7zm-j7bb
24
vulnerability VCID-p4xa-ks7v-wbay
25
vulnerability VCID-qgqk-f1g2-7fbz
26
vulnerability VCID-saff-gz5j-8kex
27
vulnerability VCID-v43a-k2bg-wkbz
28
vulnerability VCID-w2qv-hbsf-xyfh
29
vulnerability VCID-znn9-qud3-wqat
30
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.8
2
url pkg:pypi/salt@2017.7.2
purl pkg:pypi/salt@2017.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-48tt-fe7z-ybfb
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-7mam-gwcp-8kdm
9
vulnerability VCID-8mpz-ke16-fbej
10
vulnerability VCID-a8kw-uehx-xfg5
11
vulnerability VCID-ce2x-ehyk-nufk
12
vulnerability VCID-cubj-wrbp-1qbu
13
vulnerability VCID-e6kv-phwy-vfef
14
vulnerability VCID-e8qc-mktf-gyam
15
vulnerability VCID-gafc-bb59-9yhb
16
vulnerability VCID-h4tm-9wqz-1qge
17
vulnerability VCID-j5th-837s-fkft
18
vulnerability VCID-jbea-m4ak-tqd7
19
vulnerability VCID-jyxg-h3a9-8ygv
20
vulnerability VCID-k1gu-khda-jyeb
21
vulnerability VCID-mbpz-g2vs-tqc1
22
vulnerability VCID-neby-tsrt-ryg5
23
vulnerability VCID-nehw-r7zm-j7bb
24
vulnerability VCID-p4xa-ks7v-wbay
25
vulnerability VCID-qgqk-f1g2-7fbz
26
vulnerability VCID-saff-gz5j-8kex
27
vulnerability VCID-v43a-k2bg-wkbz
28
vulnerability VCID-w2qv-hbsf-xyfh
29
vulnerability VCID-znn9-qud3-wqat
30
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.2
aliases CVE-2017-14695, GHSA-j6gj-pg62-x8j6, PYSEC-2017-36
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kapu-yvhn-ybhw
10
url VCID-mbpz-g2vs-tqc1
vulnerability_id VCID-mbpz-g2vs-tqc1
summary In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28972.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28972.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-28972
reference_id
reference_type
scores
0
value 0.00802
scoring_system epss
scoring_elements 0.74446
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-28972
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-74.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-74.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2358
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2358
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L14
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L14
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L14
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L14
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L14
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L14
8
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-28972
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-28972
19
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
20
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
21
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
22
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
23
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
24
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933347
reference_id 1933347
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933347
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2020-28972, GHSA-w589-r335-4f55, PYSEC-2021-74
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mbpz-g2vs-tqc1
11
url VCID-neby-tsrt-ryg5
vulnerability_id VCID-neby-tsrt-ryg5
summary An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25284.json
reference_id
reference_type
scores
0
value 4.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25284.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25284
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.0578
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25284
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-53.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-53.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L37
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L37
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L37
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L37
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L37
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L37
7
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
8
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
9
reference_url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-25284
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-25284
20
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
21
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
22
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
23
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
24
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933339
reference_id 1933339
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933339
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2021-25284, GHSA-r55w-xph5-xvx2, PYSEC-2021-53
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-neby-tsrt-ryg5
12
url VCID-p4xa-ks7v-wbay
vulnerability_id VCID-p4xa-ks7v-wbay
summary An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.
references
0
reference_url http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25281.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25281.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25281
reference_id
reference_type
scores
0
value 0.93846
scoring_system epss
scoring_elements 0.99875
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25281
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-50.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-50.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L28
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L28
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L28
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L28
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L28
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L28
8
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
9
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-25281
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-25281
20
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
21
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
22
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
23
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
24
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
25
reference_url https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21
26
reference_url https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/
reference_id
reference_type
scores
url https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933325
reference_id 1933325
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933325
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2021-25281, GHSA-xxw3-765m-f37p, PYSEC-2021-50
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p4xa-ks7v-wbay
13
url VCID-v43a-k2bg-wkbz
vulnerability_id VCID-v43a-k2bg-wkbz
summary An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3197.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3197.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3197
reference_id
reference_type
scores
0
value 0.09933
scoring_system epss
scoring_elements 0.93161
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3197
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-57.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-57.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2375
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2375
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L38
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L38
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L38
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L38
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L38
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L38
8
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
9
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
10
reference_url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3197
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3197
21
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
22
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
23
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
24
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
25
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933323
reference_id 1933323
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933323
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2021-3197, GHSA-8rp6-x3r7-5qw3, PYSEC-2021-57
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v43a-k2bg-wkbz
14
url VCID-w2qv-hbsf-xyfh
vulnerability_id VCID-w2qv-hbsf-xyfh
summary In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master or minions.)
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3144.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3144.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3144
reference_id
reference_type
scores
0
value 0.05481
scoring_system epss
scoring_elements 0.9037
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3144
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-54.yaml
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-54.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2373
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2373
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L26
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L26
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L26
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L26
7
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L26
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L26
8
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
9
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3144
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3144
20
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25
21
reference_url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
22
reference_url https://security.gentoo.org/glsa/202103-01
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202103-01
23
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
24
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933344
reference_id 1933344
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933344
fixed_packages
0
url pkg:pypi/salt@2015.8.10
purl pkg:pypi/salt@2015.8.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xs9-ym4e-fyag
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8ghn-kbm9-sfas
6
vulnerability VCID-8mpz-ke16-fbej
7
vulnerability VCID-a8kw-uehx-xfg5
8
vulnerability VCID-ce2x-ehyk-nufk
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-jyxg-h3a9-8ygv
15
vulnerability VCID-k1gu-khda-jyeb
16
vulnerability VCID-kapu-yvhn-ybhw
17
vulnerability VCID-nehw-r7zm-j7bb
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-reer-fk1f-tkbj
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-xccs-pwhb-nuce
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10
1
url pkg:pypi/salt@2015.8.13
purl pkg:pypi/salt@2015.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-saff-gz5j-8kex
19
vulnerability VCID-znn9-qud3-wqat
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13
2
url pkg:pypi/salt@2016.3.4
purl pkg:pypi/salt@2016.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8ghn-kbm9-sfas
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-qgqk-f1g2-7fbz
18
vulnerability VCID-reer-fk1f-tkbj
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-xccs-pwhb-nuce
21
vulnerability VCID-znn9-qud3-wqat
22
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4
3
url pkg:pypi/salt@2016.3.6
purl pkg:pypi/salt@2016.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-58p2-6c4u-tybp
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-hgv6-czxs-cfbc
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-kapu-yvhn-ybhw
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-qgqk-f1g2-7fbz
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-znn9-qud3-wqat
19
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6
4
url pkg:pypi/salt@2016.3.8
purl pkg:pypi/salt@2016.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48tt-fe7z-ybfb
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e6kv-phwy-vfef
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-hgv6-czxs-cfbc
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8
5
url pkg:pypi/salt@2016.11.3
purl pkg:pypi/salt@2016.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-e6kv-phwy-vfef
9
vulnerability VCID-e8qc-mktf-gyam
10
vulnerability VCID-gafc-bb59-9yhb
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-hgv6-czxs-cfbc
13
vulnerability VCID-jyxg-h3a9-8ygv
14
vulnerability VCID-k1gu-khda-jyeb
15
vulnerability VCID-kapu-yvhn-ybhw
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-pr6t-nw24-cfcp
18
vulnerability VCID-qgqk-f1g2-7fbz
19
vulnerability VCID-saff-gz5j-8kex
20
vulnerability VCID-znn9-qud3-wqat
21
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3
6
url pkg:pypi/salt@2016.11.5
purl pkg:pypi/salt@2016.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-58p2-6c4u-tybp
4
vulnerability VCID-7mam-gwcp-8kdm
5
vulnerability VCID-8mpz-ke16-fbej
6
vulnerability VCID-a8kw-uehx-xfg5
7
vulnerability VCID-ce2x-ehyk-nufk
8
vulnerability VCID-cubj-wrbp-1qbu
9
vulnerability VCID-e6kv-phwy-vfef
10
vulnerability VCID-e8qc-mktf-gyam
11
vulnerability VCID-gafc-bb59-9yhb
12
vulnerability VCID-h4tm-9wqz-1qge
13
vulnerability VCID-hgv6-czxs-cfbc
14
vulnerability VCID-j5th-837s-fkft
15
vulnerability VCID-jbea-m4ak-tqd7
16
vulnerability VCID-jyxg-h3a9-8ygv
17
vulnerability VCID-k1gu-khda-jyeb
18
vulnerability VCID-kapu-yvhn-ybhw
19
vulnerability VCID-nehw-r7zm-j7bb
20
vulnerability VCID-qgqk-f1g2-7fbz
21
vulnerability VCID-saff-gz5j-8kex
22
vulnerability VCID-znn9-qud3-wqat
23
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5
7
url pkg:pypi/salt@2016.11.10
purl pkg:pypi/salt@2016.11.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e6kv-phwy-vfef
8
vulnerability VCID-e8qc-mktf-gyam
9
vulnerability VCID-gafc-bb59-9yhb
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-nehw-r7zm-j7bb
14
vulnerability VCID-qgqk-f1g2-7fbz
15
vulnerability VCID-saff-gz5j-8kex
16
vulnerability VCID-znn9-qud3-wqat
17
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10
8
url pkg:pypi/salt@2017.7.8
purl pkg:pypi/salt@2017.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-48tt-fe7z-ybfb
3
vulnerability VCID-7mam-gwcp-8kdm
4
vulnerability VCID-8mpz-ke16-fbej
5
vulnerability VCID-a8kw-uehx-xfg5
6
vulnerability VCID-ce2x-ehyk-nufk
7
vulnerability VCID-e8qc-mktf-gyam
8
vulnerability VCID-gafc-bb59-9yhb
9
vulnerability VCID-h4tm-9wqz-1qge
10
vulnerability VCID-jyxg-h3a9-8ygv
11
vulnerability VCID-k1gu-khda-jyeb
12
vulnerability VCID-nehw-r7zm-j7bb
13
vulnerability VCID-saff-gz5j-8kex
14
vulnerability VCID-znn9-qud3-wqat
15
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8
9
url pkg:pypi/salt@2019.2.0rc1
purl pkg:pypi/salt@2019.2.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-7mam-gwcp-8kdm
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-e8qc-mktf-gyam
7
vulnerability VCID-gafc-bb59-9yhb
8
vulnerability VCID-h4tm-9wqz-1qge
9
vulnerability VCID-jyxg-h3a9-8ygv
10
vulnerability VCID-k1gu-khda-jyeb
11
vulnerability VCID-nehw-r7zm-j7bb
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-znn9-qud3-wqat
14
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1
10
url pkg:pypi/salt@2019.2.5
purl pkg:pypi/salt@2019.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5
11
url pkg:pypi/salt@2019.2.8
purl pkg:pypi/salt@2019.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8
12
url pkg:pypi/salt@3000.6
purl pkg:pypi/salt@3000.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6
13
url pkg:pypi/salt@3000.7
purl pkg:pypi/salt@3000.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7
14
url pkg:pypi/salt@3001.4
purl pkg:pypi/salt@3001.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4
15
url pkg:pypi/salt@3001.5
purl pkg:pypi/salt@3001.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-znn9-qud3-wqat
11
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5
16
url pkg:pypi/salt@3002.3
purl pkg:pypi/salt@3002.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-47u4-vdsp-c3ct
3
vulnerability VCID-48r4-3qds-bbhv
4
vulnerability VCID-5hr1-5aec-43h3
5
vulnerability VCID-65p4-5x86-y3fj
6
vulnerability VCID-6cfw-9xe8-43d6
7
vulnerability VCID-8mpz-ke16-fbej
8
vulnerability VCID-a8kw-uehx-xfg5
9
vulnerability VCID-ce2x-ehyk-nufk
10
vulnerability VCID-h4tm-9wqz-1qge
11
vulnerability VCID-jyxg-h3a9-8ygv
12
vulnerability VCID-k1gu-khda-jyeb
13
vulnerability VCID-mbpz-g2vs-tqc1
14
vulnerability VCID-neby-tsrt-ryg5
15
vulnerability VCID-nehw-r7zm-j7bb
16
vulnerability VCID-p4xa-ks7v-wbay
17
vulnerability VCID-saff-gz5j-8kex
18
vulnerability VCID-v43a-k2bg-wkbz
19
vulnerability VCID-w2qv-hbsf-xyfh
20
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3
17
url pkg:pypi/salt@3002.5
purl pkg:pypi/salt@3002.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47u4-vdsp-c3ct
1
vulnerability VCID-48r4-3qds-bbhv
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zter-3e3b-7yfb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5
aliases CVE-2021-3144, GHSA-w2hr-3mc8-46gh, PYSEC-2021-54
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w2qv-hbsf-xyfh
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8