Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/8461?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/8461?format=api", "purl": "pkg:pypi/salt@2014.1.0rc3", "type": "pypi", "namespace": "", "name": "salt", "version": "2014.1.0rc3", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3005.2", "latest_non_vulnerable_version": "3007.9", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35732?format=api", "vulnerability_id": "VCID-2ds7-ga65-r3b6", "summary": "An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3148.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3148.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3148", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07332", "scoring_system": "epss", "scoring_elements": "0.91836", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3148" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-55.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2374" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L23" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L23" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L23" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3148", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3148" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933336", "reference_id": "1933336", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933336" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3148", "GHSA-ghc2-hx3w-jqmp", "PYSEC-2021-55" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2ds7-ga65-r3b6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35731?format=api", "vulnerability_id": "VCID-2h9s-fgnc-1qeg", "summary": "An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28243.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28243.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28243", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01408", "scoring_system": "epss", "scoring_elements": "0.80825", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28243" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-73.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-73.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L12" }, { "reference_url": "https://github.com/stealthcopter/CVE-2020-28243", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/stealthcopter/CVE-2020-28243" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28243", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28243" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://sec.stealthcopter.com/cve-2020-28243", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://sec.stealthcopter.com/cve-2020-28243" }, { "reference_url": "https://sec.stealthcopter.com/cve-2020-28243/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://sec.stealthcopter.com/cve-2020-28243/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933350", "reference_id": "1933350", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933350" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-28243", "GHSA-phhw-3wc9-8q75", "PYSEC-2021-73" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2h9s-fgnc-1qeg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35023?format=api", "vulnerability_id": "VCID-3xs9-ym4e-fyag", "summary": "Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9639.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9639.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9639", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00804", "scoring_system": "epss", "scoring_elements": "0.74468", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9639" }, { "reference_url": "https://docs.saltproject.io/en/latest/topics/releases/2015.8.11.html#new-master-configuration-parameter", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltproject.io/en/latest/topics/releases/2015.8.11.html#new-master-configuration-parameter" }, { "reference_url": "https://docs.saltstack.com/en/2015.8/ref/configuration/master.html#rotate-aes-key", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/2015.8/ref/configuration/master.html#rotate-aes-key" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-34.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-34.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9639", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9639" }, { "reference_url": "https://web.archive.org/web/20200227212146/http://www.securityfocus.com/bid/94553", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227212146/http://www.securityfocus.com/bid/94553" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/11/25/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/11/25/2" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/11/25/3", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/11/25/3" }, { "reference_url": "http://www.securityfocus.com/bid/94553", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/94553" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1399220", "reference_id": "1399220", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1399220" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9629?format=api", "purl": "pkg:pypi/salt@2015.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.11" } ], "aliases": [ "CVE-2016-9639", "GHSA-hvmj-356c-gpf4", "PYSEC-2017-34" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3xs9-ym4e-fyag" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35861?format=api", "vulnerability_id": "VCID-47u4-vdsp-c3ct", "summary": "An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\\salt\\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22004.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22004.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-22004", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33796", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-22004" }, { "reference_url": "https://github.com/advisories/GHSA-xf37-qcvf-7m57", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xf37-qcvf-7m57" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-346.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-346.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22004", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22004" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041836", "reference_id": "2041836", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041836" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23508?format=api", "purl": "pkg:pypi/salt@3003.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3" } ], "aliases": [ "CVE-2021-22004", "GHSA-xf37-qcvf-7m57", "PYSEC-2021-346" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-47u4-vdsp-c3ct" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35380?format=api", "vulnerability_id": "VCID-48tt-fe7z-ybfb", "summary": "SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL module for Salt. The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1010259", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00363", "scoring_system": "epss", "scoring_elements": "0.58645", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1010259" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2019-119.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2019-119.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534" }, { "reference_url": "https://github.com/saltstack/salt/pull/51462", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/pull/51462" }, { "reference_url": "https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010259", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010259" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/13773?format=api", "purl": "pkg:pypi/salt@2018.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.4" } ], "aliases": [ "CVE-2019-1010259", "GHSA-h8xp-h3jf-wv4v", "PYSEC-2019-119" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-48tt-fe7z-ybfb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35135?format=api", "vulnerability_id": "VCID-58p2-6c4u-tybp", "summary": "SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14696.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14696.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-14696", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01854", "scoring_system": "epss", "scoring_elements": "0.83372", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-14696" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500742", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500742" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-37.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-37.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/5f8b5e1a0f23fe0f2be5b3c3e04199b57a53db5b" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14696", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14696" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/10405?format=api", "purl": "pkg:pypi/salt@2016.11.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/10406?format=api", "purl": "pkg:pypi/salt@2017.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.2" } ], "aliases": [ "CVE-2017-14696", "GHSA-657p-cj5r-mjrh", "PYSEC-2017-37" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-58p2-6c4u-tybp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35740?format=api", "vulnerability_id": "VCID-5hr1-5aec-43h3", "summary": "An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.", "references": [ { "reference_url": "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25282.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25282.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25282", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.91286", "scoring_system": "epss", "scoring_elements": "0.9967", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25282" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-51.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-51.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25282", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25282" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933327", "reference_id": "1933327", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933327" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25282", "GHSA-76x4-x3p6-rpr9", "PYSEC-2021-51" ], "risk_score": 4.1, "exploitability": "0.5", "weighted_severity": "8.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5hr1-5aec-43h3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35093?format=api", "vulnerability_id": "VCID-5w26-jb3k-u3b7", "summary": "Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4017.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4017.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-4017", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00158", "scoring_system": "epss", "scoring_elements": "0.36325", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-4017" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1222960", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1222960" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-31.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-31.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://groups.google.com/forum/#!topic/salt-users/8Kv1bytGD6c", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/forum/#!topic/salt-users/8Kv1bytGD6c" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2015/05/19/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2015/05/19/2" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4017", "reference_id": "CVE-2015-4017", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4017" }, { "reference_url": "https://github.com/advisories/GHSA-8j9g-c9rp-jvg4", "reference_id": "GHSA-8j9g-c9rp-jvg4", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-8j9g-c9rp-jvg4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9585?format=api", "purl": "pkg:pypi/salt@2014.7.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-az3x-2atn-pqh4" }, { "vulnerability": "VCID-bxh1-y9mk-3ygg" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-xfnm-yvm9-73az" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2014.7.6" } ], "aliases": [ "CVE-2015-4017", "GHSA-8j9g-c9rp-jvg4", "PYSEC-2017-31" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5w26-jb3k-u3b7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35736?format=api", "vulnerability_id": "VCID-65p4-5x86-y3fj", "summary": "An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25283.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25283.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25283", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.10038", "scoring_system": "epss", "scoring_elements": "0.93204", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25283" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-52.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-52.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L34", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L34" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.5.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.5.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25283", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25283" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933331", "reference_id": "1933331", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933331" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25283", "GHSA-xgmh-gfxw-2hvv", "PYSEC-2021-52" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-65p4-5x86-y3fj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35739?format=api", "vulnerability_id": "VCID-6cfw-9xe8-43d6", "summary": "In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35662.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35662.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35662", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73501", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35662" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-75.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-75.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L18" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L18" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L18", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L18" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35662", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35662" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933342", "reference_id": "1933342", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933342" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-35662", "GHSA-qx72-q6w3-qgc7", "PYSEC-2021-75" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6cfw-9xe8-43d6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35547?format=api", "vulnerability_id": "VCID-7mam-gwcp-8kdm", "summary": "An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html" }, { "reference_url": "http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html" }, { "reference_url": "http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11651.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11651.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-11651", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.94234", "scoring_system": "epss", "scoring_elements": "0.9993", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-11651" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-102.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-102.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11651", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11651" }, { "reference_url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG" }, { "reference_url": "https://usn.ubuntu.com/4459-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4459-1" }, { "reference_url": "https://usn.ubuntu.com/4459-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4459-1/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4676", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2020/dsa-4676" }, { "reference_url": "http://www.vmware.com/security/advisories/VMSA-2020-0009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.vmware.com/security/advisories/VMSA-2020-0009.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832474", "reference_id": "1832474", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832474" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/48421.txt", "reference_id": "CVE-2020-11652;CVE-2020-11651", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/48421.txt" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/15549?format=api", "purl": "pkg:pypi/salt@2019.2.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/15550?format=api", "purl": "pkg:pypi/salt@3000.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.2" } ], "aliases": [ "CVE-2020-11651", "GHSA-pjhf-vpx3-33r3", "PYSEC-2020-102" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7mam-gwcp-8kdm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35204?format=api", "vulnerability_id": "VCID-8ghn-kbm9-sfas", "summary": "In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7893.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7893.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-7893", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00468", "scoring_system": "epss", "scoring_elements": "0.64858", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-7893" }, { "reference_url": "https://docs.saltstack.com/en/2017.7/topics/releases/2016.3.6.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://docs.saltstack.com/en/2017.7/topics/releases/2016.3.6.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-50.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-50.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1572139", "reference_id": "1572139", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1572139" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7893", "reference_id": "CVE-2017-7893", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7893" }, { "reference_url": "https://github.com/advisories/GHSA-g283-88v5-rmq2", "reference_id": "GHSA-g283-88v5-rmq2", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-g283-88v5-rmq2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" } ], "aliases": [ "CVE-2017-7893", "GHSA-g283-88v5-rmq2", "PYSEC-2018-50" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8ghn-kbm9-sfas" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34892?format=api", "vulnerability_id": "VCID-8jkp-8ngh-9bcd", "summary": "Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.", "references": [ { "reference_url": "http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3563", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33832", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3563" }, { "reference_url": "http://seclists.org/oss-sec/2014/q3/428", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/oss-sec/2014/q3/428" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95392", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95392" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2014-18.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2014-18.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3563", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3563" }, { "reference_url": "http://www.securityfocus.com/bid/69319", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/69319" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8472?format=api", "purl": "pkg:pypi/salt@2014.1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-5w26-jb3k-u3b7" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-az3x-2atn-pqh4" }, { "vulnerability": "VCID-bxh1-y9mk-3ygg" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-u5sa-wp1e-wyhg" }, { "vulnerability": "VCID-v345-m7e1-aue2" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-xfnm-yvm9-73az" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2014.1.10" } ], "aliases": [ "CVE-2014-3563", "GHSA-mfr3-9cj8-h2qm", "PYSEC-2014-18" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8jkp-8ngh-9bcd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36069?format=api", "vulnerability_id": "VCID-8mpz-ke16-fbej", "summary": "An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22935", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0007", "scoring_system": "epss", "scoring_elements": "0.21551", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22935" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-172.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-172.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L29", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L29" }, { "reference_url": "https://github.com/saltstack/salt/releases,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saltstack/salt/releases," }, { "reference_url": "https://repo.saltproject.io/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://repo.saltproject.io/" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release/,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release/," }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22935", "reference_id": "CVE-2022-22935", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22935" }, { "reference_url": "https://github.com/advisories/GHSA-cvcc-5x92-gmhc", "reference_id": "GHSA-cvcc-5x92-gmhc", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-cvcc-5x92-gmhc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/21606?format=api", "purl": "pkg:pypi/salt@3002.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/35620?format=api", "purl": "pkg:pypi/salt@3003.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/35624?format=api", "purl": "pkg:pypi/salt@3004.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1" } ], "aliases": [ "CVE-2022-22935", "GHSA-cvcc-5x92-gmhc", "PYSEC-2022-172" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8mpz-ke16-fbej" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35860?format=api", "vulnerability_id": "VCID-a8kw-uehx-xfg5", "summary": "An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21996.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21996.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21996", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02263", "scoring_system": "epss", "scoring_elements": "0.84929", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21996" }, { "reference_url": "https://github.com/advisories/GHSA-pf7h-h2wq-m7pg", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-pf7h-h2wq-m7pg" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-318.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-318.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041838", "reference_id": "2041838", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041838" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21996", "reference_id": "CVE-2021-21996", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21996" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23508?format=api", "purl": "pkg:pypi/salt@3003.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3" } ], "aliases": [ "CVE-2021-21996", "GHSA-pf7h-h2wq-m7pg", "PYSEC-2021-318" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a8kw-uehx-xfg5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35020?format=api", "vulnerability_id": "VCID-az3x-2atn-pqh4", "summary": "The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8034.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8034.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-8034", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10632", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-8034" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-32.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-32.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/issues/28455", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/issues/28455" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8034", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8034" }, { "reference_url": "https://web.archive.org/web/20200227192308/http://www.securityfocus.com/bid/96390", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227192308/http://www.securityfocus.com/bid/96390" }, { "reference_url": "http://www.securityfocus.com/bid/96390", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/96390" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289109", "reference_id": "1289109", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289109" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9170?format=api", "purl": "pkg:pypi/salt@2015.8.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ac31-t3u6-cfap" }, { "vulnerability": "VCID-bxh1-y9mk-3ygg" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.3" } ], "aliases": [ "CVE-2015-8034", "GHSA-6prw-8xhm-h247", "PYSEC-2017-32" ], "risk_score": 1.5, "exploitability": "0.5", "weighted_severity": "3.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-az3x-2atn-pqh4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35021?format=api", "vulnerability_id": "VCID-bxh1-y9mk-3ygg", "summary": "Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3176.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3176.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-3176", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00167", "scoring_system": "epss", "scoring_elements": "0.37476", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-3176" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2015.5.10.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2015.5.10.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2015.8.8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2015.8.8.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-33.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-33.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3176", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3176" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1320865", "reference_id": "1320865", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1320865" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9599?format=api", "purl": "pkg:pypi/salt@2015.5.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-az3x-2atn-pqh4" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.5.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/9608?format=api", "purl": "pkg:pypi/salt@2015.8.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.8" } ], "aliases": [ "CVE-2016-3176", "GHSA-v2rp-9cpj-pfw2", "PYSEC-2017-33" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bxh1-y9mk-3ygg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36542?format=api", "vulnerability_id": "VCID-ce2x-ehyk-nufk", "summary": "Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-20898", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.28962", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-20898" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL" }, { "reference_url": "https://saltproject.io/security-announcements/2023-08-10-advisory", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security-announcements/2023-08-10-advisory" }, { "reference_url": "https://saltproject.io/security-announcements/2023-08-10-advisory/", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], "url": "https://saltproject.io/security-announcements/2023-08-10-advisory/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20898", "reference_id": "CVE-2023-20898", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20898" }, { "reference_url": "https://github.com/advisories/GHSA-qvh6-3j7x-3hq7", "reference_id": "GHSA-qvh6-3j7x-3hq7", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-qvh6-3j7x-3hq7" }, { "reference_url": "https://security.gentoo.org/glsa/202412-09", "reference_id": "GLSA-202412-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-09" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/35633?format=api", "purl": "pkg:pypi/salt@3005.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/35632?format=api", "purl": "pkg:pypi/salt@3006.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2" } ], "aliases": [ "CVE-2023-20898", "GHSA-qvh6-3j7x-3hq7", "PYSEC-2023-169" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ce2x-ehyk-nufk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35664?format=api", "vulnerability_id": "VCID-cubj-wrbp-1qbu", "summary": "An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html" }, { "reference_url": "http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16846.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16846.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-16846", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.94387", "scoring_system": "epss", "scoring_elements": "0.99972", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-16846" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-104.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-104.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.6.rst#L10", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.6.rst#L10" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.4.rst#L10", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.4.rst#L10" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.2.rst#L10", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.2.rst#L10" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-16846", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-16846" }, { "reference_url": "https://security.gentoo.org/glsa/202011-13", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202011-13" }, { "reference_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-16846", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-16846" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4837", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4837" }, { "reference_url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves" }, { "reference_url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1379", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1379" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1379/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1379/" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1380", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1380" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1380/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1380/" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1381", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1381" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1381/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1381/" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1382", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1382" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1382/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1382/" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1383", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1383" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1383/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-1383/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1895449", "reference_id": "1895449", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1895449" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10219?format=api", "purl": "pkg:pypi/salt@2016.11.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12362?format=api", "purl": "pkg:pypi/salt@2017.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14851?format=api", "purl": "pkg:pypi/salt@2018.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20186?format=api", "purl": "pkg:pypi/salt@2019.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/18687?format=api", "purl": "pkg:pypi/salt@3000.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20188?format=api", "purl": "pkg:pypi/salt@3000.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20192?format=api", "purl": "pkg:pypi/salt@3001.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/20195?format=api", "purl": "pkg:pypi/salt@3002.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.1" } ], "aliases": [ "CVE-2020-16846", "GHSA-qr38-h96j-2j3w", "PYSEC-2020-104" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cubj-wrbp-1qbu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35278?format=api", "vulnerability_id": "VCID-e6kv-phwy-vfef", "summary": "SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15751.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15751.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15751", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00556", "scoring_system": "epss", "scoring_elements": "0.68496", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15751" }, { "reference_url": "https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-30.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-30.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L13", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L13" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L26" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L56", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L56" }, { "reference_url": "https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ" }, { "reference_url": "https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html" }, { "reference_url": "https://usn.ubuntu.com/4459-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4459-1" }, { "reference_url": "https://usn.ubuntu.com/4459-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4459-1/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644489", "reference_id": "1644489", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644489" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15751", "reference_id": "CVE-2018-15751", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15751" }, { "reference_url": "https://github.com/advisories/GHSA-x549-r7m8-gv63", "reference_id": "GHSA-x549-r7m8-gv63", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-x549-r7m8-gv63" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/12370?format=api", "purl": "pkg:pypi/salt@2018.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.3" } ], "aliases": [ "CVE-2018-15751", "GHSA-x549-r7m8-gv63", "PYSEC-2018-30" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e6kv-phwy-vfef" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35485?format=api", "vulnerability_id": "VCID-e8qc-mktf-gyam", "summary": "In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17361.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17361.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-17361", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.17854", "scoring_system": "epss", "scoring_elements": "0.95261", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-17361" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-177.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-177.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commits/master", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saltstack/salt/commits/master" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17361", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17361" }, { "reference_url": "https://usn.ubuntu.com/4459-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4459-1" }, { "reference_url": "https://usn.ubuntu.com/4459-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4459-1/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4676", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2020/dsa-4676" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796636", "reference_id": "1796636", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796636" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/14855?format=api", "purl": "pkg:pypi/salt@2019.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/15546?format=api", "purl": "pkg:pypi/salt@2019.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.3" } ], "aliases": [ "CVE-2019-17361", "GHSA-q53j-p6r2-g2v4", "PYSEC-2020-177" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e8qc-mktf-gyam" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35548?format=api", "vulnerability_id": "VCID-gafc-bb59-9yhb", "summary": "An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html" }, { "reference_url": "http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html" }, { "reference_url": "http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11652.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11652.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-11652", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.93683", "scoring_system": "epss", "scoring_elements": "0.99855", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-11652" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-103.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-103.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11652", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11652" }, { "reference_url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG" }, { "reference_url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000063758", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000063758" }, { "reference_url": "https://usn.ubuntu.com/4459-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4459-1" }, { "reference_url": "https://usn.ubuntu.com/4459-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4459-1/" }, { "reference_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11652", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11652" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4676", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2020/dsa-4676" }, { "reference_url": "http://www.vmware.com/security/advisories/VMSA-2020-0009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.vmware.com/security/advisories/VMSA-2020-0009.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832420", "reference_id": "1832420", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832420" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/15549?format=api", "purl": "pkg:pypi/salt@2019.2.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/15550?format=api", "purl": "pkg:pypi/salt@3000.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.2" } ], "aliases": [ "CVE-2020-11652", "GHSA-vp49-2g4r-m3x3", "PYSEC-2020-103" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gafc-bb59-9yhb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36113?format=api", "vulnerability_id": "VCID-h4tm-9wqz-1qge", "summary": "An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22967", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66531", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22967" }, { "reference_url": "https://github.com/advisories/GHSA-fpxm-fprw-6hxj", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fpxm-fprw-6hxj" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22967", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22967" }, { "reference_url": "https://repo.saltproject.io", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://repo.saltproject.io" }, { "reference_url": "https://repo.saltproject.io/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://repo.saltproject.io/" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/,", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/," }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/21607?format=api", "purl": "pkg:pypi/salt@3002.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/35621?format=api", "purl": "pkg:pypi/salt@3003.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/35625?format=api", "purl": "pkg:pypi/salt@3004.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.2" } ], "aliases": [ "CVE-2022-22967", "GHSA-fpxm-fprw-6hxj", "PYSEC-2022-210" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h4tm-9wqz-1qge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35090?format=api", "vulnerability_id": "VCID-hgv6-czxs-cfbc", "summary": "Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12791.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12791.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-12791", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00924", "scoring_system": "epss", "scoring_elements": "0.7639", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-12791" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872399", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872399" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1482006", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1482006" }, { "reference_url": "https://docs.saltstack.com/en/2016.11/topics/releases/2016.11.7.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/2016.11/topics/releases/2016.11.7.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-151.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-151.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-35.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-35.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/pull/42944", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/pull/42944" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12791", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12791" }, { "reference_url": "http://www.securityfocus.com/bid/100384", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "http://www.securityfocus.com/bid/100384" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10221?format=api", "purl": "pkg:pypi/salt@2016.11.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/10222?format=api", "purl": "pkg:pypi/salt@2017.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.1" } ], "aliases": [ "CVE-2017-12791", "GHSA-xxvj-8g5m-4qgw", "PYSEC-2017-151", "PYSEC-2017-35" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hgv6-czxs-cfbc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35665?format=api", "vulnerability_id": "VCID-j5th-837s-fkft", "summary": "In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html" }, { "reference_url": "http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25592.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25592.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-25592", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.44938", "scoring_system": "epss", "scoring_elements": "0.97652", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-25592" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/index.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/index.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-106.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-106.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.7.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.7.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.5.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.5.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.3.rst#L12", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.3.rst#L12" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L14" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25592", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25592" }, { "reference_url": "https://security.gentoo.org/glsa/202011-13", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202011-13" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4837", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4837" }, { "reference_url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves" }, { "reference_url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1895454", "reference_id": "1895454", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1895454" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10219?format=api", "purl": "pkg:pypi/salt@2016.11.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12362?format=api", "purl": "pkg:pypi/salt@2017.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14851?format=api", "purl": "pkg:pypi/salt@2018.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20187?format=api", "purl": "pkg:pypi/salt@2019.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/18687?format=api", "purl": "pkg:pypi/salt@3000.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20189?format=api", "purl": "pkg:pypi/salt@3000.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20193?format=api", "purl": "pkg:pypi/salt@3001.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20195?format=api", "purl": "pkg:pypi/salt@3002.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.1" } ], "aliases": [ "CVE-2020-25592", "GHSA-29j3-2446-5j4w", "PYSEC-2020-106" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j5th-837s-fkft" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35663?format=api", "vulnerability_id": "VCID-jbea-m4ak-tqd7", "summary": "The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17490.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17490.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-17490", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00046", "scoring_system": "epss", "scoring_elements": "0.14483", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-17490" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/index.html#latest-branch-release", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/index.html#latest-branch-release" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-105.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2020-105.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.6.rst#L10", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2019.2.6.rst#L10" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.4.rst#L10", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.4.rst#L10" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.2.rst#L10", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.2.rst#L10" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L13", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.1.rst#L13" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17490", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17490" }, { "reference_url": "https://security.gentoo.org/glsa/202011-13", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202011-13" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4837", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4837" }, { "reference_url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves" }, { "reference_url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1895451", "reference_id": "1895451", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1895451" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10219?format=api", "purl": "pkg:pypi/salt@2016.11.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12362?format=api", "purl": "pkg:pypi/salt@2017.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14851?format=api", "purl": "pkg:pypi/salt@2018.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20186?format=api", "purl": "pkg:pypi/salt@2019.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/18687?format=api", "purl": "pkg:pypi/salt@3000.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20188?format=api", "purl": "pkg:pypi/salt@3000.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20192?format=api", "purl": "pkg:pypi/salt@3001.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/20195?format=api", "purl": "pkg:pypi/salt@3002.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.1" } ], "aliases": [ "CVE-2020-17490", "GHSA-3c56-vx6v-q5vh", "PYSEC-2020-105" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jbea-m4ak-tqd7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36068?format=api", "vulnerability_id": "VCID-jyxg-h3a9-8ygv", "summary": "An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22941", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03576", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22941" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30" }, { "reference_url": "https://github.com/saltstack/salt/releases,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saltstack/salt/releases," }, { "reference_url": "https://repo.saltproject.io", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://repo.saltproject.io" }, { "reference_url": "https://repo.saltproject.io/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://repo.saltproject.io/" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release/,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release/," }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22941", "reference_id": "CVE-2022-22941", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22941" }, { "reference_url": "https://github.com/advisories/GHSA-qcr3-hr2f-6557", "reference_id": "GHSA-qcr3-hr2f-6557", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-qcr3-hr2f-6557" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/21606?format=api", "purl": "pkg:pypi/salt@3002.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/35620?format=api", "purl": "pkg:pypi/salt@3003.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/35624?format=api", "purl": "pkg:pypi/salt@3004.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1" } ], "aliases": [ "CVE-2022-22941", "GHSA-qcr3-hr2f-6557", "PYSEC-2022-174" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jyxg-h3a9-8ygv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36070?format=api", "vulnerability_id": "VCID-k1gu-khda-jyeb", "summary": "An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22934", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0012", "scoring_system": "epss", "scoring_elements": "0.30538", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22934" }, { "reference_url": "https://blog.cloudflare.com/future-proofing-saltstack", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://blog.cloudflare.com/future-proofing-saltstack" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-171.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-171.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://github.com/saltstack/salt/releases,", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases," }, { "reference_url": "https://repo.saltproject.io", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://repo.saltproject.io" }, { "reference_url": "https://repo.saltproject.io/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://repo.saltproject.io/" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release/,", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release/," }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22934", "reference_id": "CVE-2022-22934", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22934" }, { "reference_url": "https://github.com/advisories/GHSA-2q4g-wfm6-5fpm", "reference_id": "GHSA-2q4g-wfm6-5fpm", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-2q4g-wfm6-5fpm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/21606?format=api", "purl": "pkg:pypi/salt@3002.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/35620?format=api", "purl": "pkg:pypi/salt@3003.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/35624?format=api", "purl": "pkg:pypi/salt@3004.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1" } ], "aliases": [ "CVE-2022-22934", "GHSA-2q4g-wfm6-5fpm", "PYSEC-2022-171" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k1gu-khda-jyeb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35134?format=api", "vulnerability_id": "VCID-kapu-yvhn-ybhw", "summary": "Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14695.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14695.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-14695", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00331", "scoring_system": "epss", "scoring_elements": "0.56273", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-14695" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500748", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1500748" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2016.11.8.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2016.3.8.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-36.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-36.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commit/80d90307b07b3703428ecbb7c8bb468e28a9ae6d", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/80d90307b07b3703428ecbb7c8bb468e28a9ae6d" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14695", "reference_id": "CVE-2017-14695", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14695" }, { "reference_url": "https://github.com/advisories/GHSA-j6gj-pg62-x8j6", "reference_id": "GHSA-j6gj-pg62-x8j6", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-j6gj-pg62-x8j6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/10405?format=api", "purl": "pkg:pypi/salt@2016.11.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/10406?format=api", "purl": "pkg:pypi/salt@2017.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.2" } ], "aliases": [ "CVE-2017-14695", "GHSA-j6gj-pg62-x8j6", "PYSEC-2017-36" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kapu-yvhn-ybhw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35734?format=api", "vulnerability_id": "VCID-mbpz-g2vs-tqc1", "summary": "In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28972.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28972.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28972", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00802", "scoring_system": "epss", "scoring_elements": "0.74446", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-28972" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-74.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-74.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2358", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2358" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L14" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L14" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L14" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28972", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28972" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "8.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933347", "reference_id": "1933347", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933347" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2020-28972", "GHSA-w589-r335-4f55", "PYSEC-2021-74" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mbpz-g2vs-tqc1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35737?format=api", "vulnerability_id": "VCID-neby-tsrt-ryg5", "summary": "An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25284.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25284.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25284", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.0578", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25284" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-53.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-53.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L37" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L37" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L37", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L37" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25284", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25284" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933339", "reference_id": "1933339", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933339" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25284", "GHSA-r55w-xph5-xvx2", "PYSEC-2021-53" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-neby-tsrt-ryg5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36541?format=api", "vulnerability_id": "VCID-nehw-r7zm-j7bb", "summary": "Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-20897", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00175", "scoring_system": "epss", "scoring_elements": "0.38746", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-20897" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL" }, { "reference_url": "https://saltproject.io/security-announcements/2023-08-10-advisory", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security-announcements/2023-08-10-advisory" }, { "reference_url": "https://saltproject.io/security-announcements/2023-08-10-advisory/", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://saltproject.io/security-announcements/2023-08-10-advisory/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20897", "reference_id": "CVE-2023-20897", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20897" }, { "reference_url": "https://github.com/advisories/GHSA-vpjg-wmf8-29h9", "reference_id": "GHSA-vpjg-wmf8-29h9", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-vpjg-wmf8-29h9" }, { "reference_url": "https://security.gentoo.org/glsa/202412-09", "reference_id": "GLSA-202412-09", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202412-09" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/35633?format=api", "purl": "pkg:pypi/salt@3005.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/35632?format=api", "purl": "pkg:pypi/salt@3006.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2" } ], "aliases": [ "CVE-2023-20897", "GHSA-vpjg-wmf8-29h9", "PYSEC-2023-166" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nehw-r7zm-j7bb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35738?format=api", "vulnerability_id": "VCID-p4xa-ks7v-wbay", "summary": "An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.", "references": [ { "reference_url": "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25281.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25281.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25281", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.93846", "scoring_system": "epss", "scoring_elements": "0.99875", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25281" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-50.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-50.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L28" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L28" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L28" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25281", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25281" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21" }, { "reference_url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933325", "reference_id": "1933325", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933325" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-25281", "GHSA-xxw3-765m-f37p", "PYSEC-2021-50" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p4xa-ks7v-wbay" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35277?format=api", "vulnerability_id": "VCID-qgqk-f1g2-7fbz", "summary": "Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15750.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15750.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15750", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00912", "scoring_system": "epss", "scoring_elements": "0.76234", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-15750" }, { "reference_url": "https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-29.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-29.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L15", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L15" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L28", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L28" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L58", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L58" }, { "reference_url": "https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ" }, { "reference_url": "https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html" }, { "reference_url": "https://usn.ubuntu.com/4459-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4459-1" }, { "reference_url": "https://usn.ubuntu.com/4459-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4459-1/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644484", "reference_id": "1644484", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644484" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15750", "reference_id": "CVE-2018-15750", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15750" }, { "reference_url": "https://github.com/advisories/GHSA-jx34-pppm-gjvr", "reference_id": "GHSA-jx34-pppm-gjvr", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-jx34-pppm-gjvr" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/12370?format=api", "purl": "pkg:pypi/salt@2018.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2018.3.3" } ], "aliases": [ "CVE-2018-15750", "GHSA-jx34-pppm-gjvr", "PYSEC-2018-29" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qgqk-f1g2-7fbz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35119?format=api", "vulnerability_id": "VCID-reer-fk1f-tkbj", "summary": "Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5200.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5200.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5200", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0097", "scoring_system": "epss", "scoring_elements": "0.76959", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5200" }, { "reference_url": "https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html" }, { "reference_url": "https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-39.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-39.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418347", "reference_id": "1418347", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418347" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5200", "reference_id": "CVE-2017-5200", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5200" }, { "reference_url": "https://github.com/advisories/GHSA-8r7r-x48r-pf8f", "reference_id": "GHSA-8r7r-x48r-pf8f", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-8r7r-x48r-pf8f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10212?format=api", "purl": "pkg:pypi/salt@2016.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9893?format=api", "purl": "pkg:pypi/salt@2016.11.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.2" } ], "aliases": [ "CVE-2017-5200", "GHSA-8r7r-x48r-pf8f", "PYSEC-2017-39" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-reer-fk1f-tkbj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36382?format=api", "vulnerability_id": "VCID-saff-gz5j-8kex", "summary": "Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33226", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04007", "scoring_system": "epss", "scoring_elements": "0.88646", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-33226" }, { "reference_url": "https://github.com/saltstack/salt/blob/master/salt/modules/status.py", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saltstack/salt/blob/master/salt/modules/status.py" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33226", "reference_id": "CVE-2021-33226", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33226" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23506?format=api", "purl": "pkg:pypi/salt@3003.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.1" } ], "aliases": [ "CVE-2021-33226", "PYSEC-2023-47" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-saff-gz5j-8kex" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35053?format=api", "vulnerability_id": "VCID-u5sa-wp1e-wyhg", "summary": "modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1838.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1838.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1838", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.2127", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1838" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1212784", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1212784" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-29.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-29.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commit/e11298d7155e9982749483ca5538e46090caef9c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/e11298d7155e9982749483ca5538e46090caef9c" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1838", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1838" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9583?format=api", "purl": "pkg:pypi/salt@2014.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-5w26-jb3k-u3b7" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-az3x-2atn-pqh4" }, { "vulnerability": "VCID-bxh1-y9mk-3ygg" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-xfnm-yvm9-73az" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2014.7.4" } ], "aliases": [ "CVE-2015-1838", "GHSA-92pw-mff9-jqgm", "PYSEC-2017-29" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u5sa-wp1e-wyhg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35052?format=api", "vulnerability_id": "VCID-v345-m7e1-aue2", "summary": "modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1839.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1839.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1839", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.24148", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1839" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1212788", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1212788" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-30.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-30.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commit/22d2f7a1ec93300c34e8c42d14ec39d51e610b5c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/22d2f7a1ec93300c34e8c42d14ec39d51e610b5c" }, { "reference_url": "https://github.com/saltstack/salt/commit/b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1839", "reference_id": "CVE-2015-1839", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1839" }, { "reference_url": "https://github.com/advisories/GHSA-6grp-75pq-c8cj", "reference_id": "GHSA-6grp-75pq-c8cj", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-6grp-75pq-c8cj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9583?format=api", "purl": "pkg:pypi/salt@2014.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-5w26-jb3k-u3b7" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-az3x-2atn-pqh4" }, { "vulnerability": "VCID-bxh1-y9mk-3ygg" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-xfnm-yvm9-73az" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2014.7.4" } ], "aliases": [ "CVE-2015-1839", "GHSA-6grp-75pq-c8cj", "PYSEC-2017-30" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v345-m7e1-aue2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35735?format=api", "vulnerability_id": "VCID-v43a-k2bg-wkbz", "summary": "An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3197.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3197.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3197", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09933", "scoring_system": "epss", "scoring_elements": "0.93161", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3197" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-57.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-57.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2375", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2375" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L38" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L38" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L38", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L38" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3197", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3197" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933323", "reference_id": "1933323", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933323" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3197", "GHSA-8rp6-x3r7-5qw3", "PYSEC-2021-57" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v43a-k2bg-wkbz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35733?format=api", "vulnerability_id": "VCID-w2qv-hbsf-xyfh", "summary": "In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master or minions.)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3144.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3144.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3144", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05481", "scoring_system": "epss", "scoring_elements": "0.9037", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3144" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-54.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-54.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2373", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/CHANGELOG.md?plain=1#L2373" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3000.7.rst#L26" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3001.5.rst#L26" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L26", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.3.rst#L26" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3144", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3144" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25" }, { "reference_url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/" }, { "reference_url": "https://security.gentoo.org/glsa/202103-01", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-01" }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://www.debian.org/security/2021/dsa-5011", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-5011" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933344", "reference_id": "1933344", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1933344" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9628?format=api", "purl": "pkg:pypi/salt@2015.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10211?format=api", "purl": "pkg:pypi/salt@2016.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/10213?format=api", "purl": "pkg:pypi/salt@2016.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/10215?format=api", "purl": "pkg:pypi/salt@2016.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/9894?format=api", "purl": "pkg:pypi/salt@2016.11.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/10218?format=api", "purl": "pkg:pypi/salt@2016.11.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/12359?format=api", "purl": "pkg:pypi/salt@2016.11.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/12369?format=api", "purl": "pkg:pypi/salt@2017.7.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2017.7.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/14852?format=api", "purl": "pkg:pypi/salt@2019.2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/18686?format=api", "purl": "pkg:pypi/salt@2019.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20199?format=api", "purl": "pkg:pypi/salt@2019.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2019.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/20200?format=api", "purl": "pkg:pypi/salt@3000.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/20206?format=api", "purl": "pkg:pypi/salt@3000.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3000.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/20201?format=api", "purl": "pkg:pypi/salt@3001.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/20210?format=api", "purl": "pkg:pypi/salt@3001.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3001.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/20197?format=api", "purl": "pkg:pypi/salt@3002.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20202?format=api", "purl": "pkg:pypi/salt@3002.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5" } ], "aliases": [ "CVE-2021-3144", "GHSA-w2hr-3mc8-46gh", "PYSEC-2021-54" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w2qv-hbsf-xyfh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35118?format=api", "vulnerability_id": "VCID-xccs-pwhb-nuce", "summary": "When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5192.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5192.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5192", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0048", "scoring_system": "epss", "scoring_elements": "0.65427", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5192" }, { "reference_url": "https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/2016.3/topics/releases/2015.8.13.html" }, { "reference_url": "https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/2016.3/topics/releases/2016.3.5.html" }, { "reference_url": "https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-38.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-38.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5192", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5192" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418345", "reference_id": "1418345", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418345" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/10204?format=api", "purl": "pkg:pypi/salt@2015.8.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.8.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/10212?format=api", "purl": "pkg:pypi/salt@2016.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9893?format=api", "purl": "pkg:pypi/salt@2016.11.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-pr6t-nw24-cfcp" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2016.11.2" } ], "aliases": [ "CVE-2017-5192", "GHSA-f2h7-4f84-8qrm", "PYSEC-2017-38" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xccs-pwhb-nuce" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35131?format=api", "vulnerability_id": "VCID-xfnm-yvm9-73az", "summary": "salt before 2015.5.5 leaks git usernames and passwords to the log.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6918.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6918.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6918", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00298", "scoring_system": "epss", "scoring_elements": "0.5349", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6918" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1257154", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1257154" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-70.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-70.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/commit/28aa9b105804ff433d8f663b2f9b804f2b75495a", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/commit/28aa9b105804ff433d8f663b2f9b804f2b75495a" }, { "reference_url": "https://github.com/saltstack/salt/issues/26484", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/issues/26484" }, { "reference_url": "https://github.com/saltstack/salt/pull/26486", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/pull/26486" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6918", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6918" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/9594?format=api", "purl": "pkg:pypi/salt@2015.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-3xs9-ym4e-fyag" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48tt-fe7z-ybfb" }, { "vulnerability": "VCID-58p2-6c4u-tybp" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-7mam-gwcp-8kdm" }, { "vulnerability": "VCID-8ghn-kbm9-sfas" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-az3x-2atn-pqh4" }, { "vulnerability": "VCID-bxh1-y9mk-3ygg" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-cubj-wrbp-1qbu" }, { "vulnerability": "VCID-e6kv-phwy-vfef" }, { "vulnerability": "VCID-e8qc-mktf-gyam" }, { "vulnerability": "VCID-ft7d-u3qu-7kf8" }, { "vulnerability": "VCID-gafc-bb59-9yhb" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-hgv6-czxs-cfbc" }, { "vulnerability": "VCID-j5th-837s-fkft" }, { "vulnerability": "VCID-jbea-m4ak-tqd7" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-kapu-yvhn-ybhw" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-qgqk-f1g2-7fbz" }, { "vulnerability": "VCID-reer-fk1f-tkbj" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-xccs-pwhb-nuce" }, { "vulnerability": "VCID-znn9-qud3-wqat" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2015.5.5" } ], "aliases": [ "CVE-2015-6918", "GHSA-q2x6-8gfj-hjxw", "PYSEC-2017-70" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xfnm-yvm9-73az" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35744?format=api", "vulnerability_id": "VCID-znn9-qud3-wqat", "summary": "CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25315.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25315.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25315", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00153", "scoring_system": "epss", "scoring_elements": "0.357", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-25315" }, { "reference_url": "https://bugzilla.suse.com/show_bug.cgi?id=1182382", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.suse.com/show_bug.cgi?id=1182382" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25315", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25315" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945077", "reference_id": "1945077", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1945077" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20196?format=api", "purl": "pkg:pypi/salt@3002.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2ds7-ga65-r3b6" }, { "vulnerability": "VCID-2h9s-fgnc-1qeg" }, { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-5hr1-5aec-43h3" }, { "vulnerability": "VCID-65p4-5x86-y3fj" }, { "vulnerability": "VCID-6cfw-9xe8-43d6" }, { "vulnerability": "VCID-8mpz-ke16-fbej" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-jyxg-h3a9-8ygv" }, { "vulnerability": "VCID-k1gu-khda-jyeb" }, { "vulnerability": "VCID-mbpz-g2vs-tqc1" }, { "vulnerability": "VCID-neby-tsrt-ryg5" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-p4xa-ks7v-wbay" }, { "vulnerability": "VCID-saff-gz5j-8kex" }, { "vulnerability": "VCID-v43a-k2bg-wkbz" }, { "vulnerability": "VCID-w2qv-hbsf-xyfh" }, { "vulnerability": "VCID-zter-3e3b-7yfb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.2" } ], "aliases": [ "CVE-2021-25315", "GHSA-pmj6-9f8c-8g2m", "PYSEC-2021-891" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-znn9-qud3-wqat" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36071?format=api", "vulnerability_id": "VCID-zter-3e3b-7yfb", "summary": "An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A sufficient craft attacker could gain root access on minion under certain scenarios.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22936", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00107", "scoring_system": "epss", "scoring_elements": "0.28526", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22936" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml" }, { "reference_url": "https://github.com/saltstack/salt", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32" }, { "reference_url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30" }, { "reference_url": "https://github.com/saltstack/salt/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/saltstack/salt/releases" }, { "reference_url": "https://github.com/saltstack/salt/releases,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/saltstack/salt/releases," }, { "reference_url": "https://repo.saltproject.io", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://repo.saltproject.io" }, { "reference_url": "https://repo.saltproject.io/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://repo.saltproject.io/" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release" }, { "reference_url": "https://saltproject.io/security_announcements/salt-security-advisory-release/,", "reference_id": "", "reference_type": "", "scores": [], "url": "https://saltproject.io/security_announcements/salt-security-advisory-release/," }, { "reference_url": "https://security.gentoo.org/glsa/202310-22", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202310-22" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22936", "reference_id": "CVE-2022-22936", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22936" }, { "reference_url": "https://github.com/advisories/GHSA-5r3f-3m3j-wcj2", "reference_id": "GHSA-5r3f-3m3j-wcj2", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-5r3f-3m3j-wcj2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/21606?format=api", "purl": "pkg:pypi/salt@3002.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47u4-vdsp-c3ct" }, { "vulnerability": "VCID-48r4-3qds-bbhv" }, { "vulnerability": "VCID-a8kw-uehx-xfg5" }, { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" }, { "vulnerability": "VCID-saff-gz5j-8kex" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/35620?format=api", "purl": "pkg:pypi/salt@3003.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/35624?format=api", "purl": "pkg:pypi/salt@3004.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ce2x-ehyk-nufk" }, { "vulnerability": "VCID-h4tm-9wqz-1qge" }, { "vulnerability": "VCID-nehw-r7zm-j7bb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1" } ], "aliases": [ "CVE-2022-22936", "GHSA-5r3f-3m3j-wcj2", "PYSEC-2022-173" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zter-3e3b-7yfb" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/salt@2014.1.0rc3" }