| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| url |
VCID-894v-eb8v-p3dk |
| vulnerability_id |
VCID-894v-eb8v-p3dk |
| summary |
Improper Authentication in SaltStack Salt |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
| reference_url |
https://github.com/saltstack/salt |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
7.5 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/saltstack/salt |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
| reference_url |
https://github.com/advisories/GHSA-xf37-qcvf-7m57 |
| reference_id |
GHSA-xf37-qcvf-7m57 |
| reference_type |
|
| scores |
| 0 |
| value |
6.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
HIGH |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 2 |
| value |
7.5 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/advisories/GHSA-xf37-qcvf-7m57 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3003.3 |
| purl |
pkg:pypi/salt@3003.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 2 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 3 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 4 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 5 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 6 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 7 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 8 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 9 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 10 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3 |
|
|
| aliases |
CVE-2021-22004, GHSA-xf37-qcvf-7m57, PYSEC-2021-346
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-894v-eb8v-p3dk |
|
| 5 |
| url |
VCID-8az5-5kg7-yfb2 |
| vulnerability_id |
VCID-8az5-5kg7-yfb2 |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/saltstack/salt |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.9 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
8.2 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/saltstack/salt |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2020-28972, GHSA-w589-r335-4f55, PYSEC-2021-74
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8az5-5kg7-yfb2 |
|
| 6 |
|
| 7 |
| url |
VCID-b2df-ykkt-dud1 |
| vulnerability_id |
VCID-b2df-ykkt-dud1 |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2021-3197, GHSA-8rp6-x3r7-5qw3, PYSEC-2021-57
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b2df-ykkt-dud1 |
|
| 8 |
|
| 9 |
| url |
VCID-cs4q-qbrx-jfbd |
| vulnerability_id |
VCID-cs4q-qbrx-jfbd |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2021-25284, GHSA-r55w-xph5-xvx2, PYSEC-2021-53
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cs4q-qbrx-jfbd |
|
| 10 |
| url |
VCID-f4qt-s9m9-rbf3 |
| vulnerability_id |
VCID-f4qt-s9m9-rbf3 |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/saltstack/salt |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
|
| 1 |
| value |
8.8 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/saltstack/salt |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2021-25282, GHSA-76x4-x3p6-rpr9, PYSEC-2021-51
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
8.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-f4qt-s9m9-rbf3 |
|
| 11 |
| url |
VCID-gtes-baaj-7beu |
| vulnerability_id |
VCID-gtes-baaj-7beu |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
| reference_url |
https://github.com/saltstack/salt |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
7.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/saltstack/salt |
|
| 4 |
| reference_url |
https://repo.saltproject.io |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
7.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://repo.saltproject.io |
|
| 5 |
|
| 6 |
| reference_url |
https://security.gentoo.org/glsa/202310-22 |
| reference_id |
202310-22 |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
7.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:30:14Z/ |
|
|
| url |
https://security.gentoo.org/glsa/202310-22 |
|
| 7 |
|
| 8 |
|
| 9 |
| reference_url |
https://github.com/advisories/GHSA-fpxm-fprw-6hxj |
| reference_id |
GHSA-fpxm-fprw-6hxj |
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
HIGH |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 2 |
| value |
7.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/advisories/GHSA-fpxm-fprw-6hxj |
|
| 10 |
| reference_url |
https://repo.saltproject.io/ |
| reference_id |
repo.saltproject.io |
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:30:14Z/ |
|
|
| url |
https://repo.saltproject.io/ |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.9 |
| purl |
pkg:pypi/salt@3002.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 3 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 4 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 5 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 6 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 7 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 8 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 9 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.9 |
|
| 1 |
|
| 2 |
|
|
| aliases |
CVE-2022-22967, GHSA-fpxm-fprw-6hxj, PYSEC-2022-210
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gtes-baaj-7beu |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
| url |
VCID-kxut-sccv-g7hu |
| vulnerability_id |
VCID-kxut-sccv-g7hu |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2021-3148, GHSA-ghc2-hx3w-jqmp, PYSEC-2021-55
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kxut-sccv-g7hu |
|
| 16 |
| url |
VCID-p435-eq6q-6udb |
| vulnerability_id |
VCID-p435-eq6q-6udb |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2021-25283, GHSA-xgmh-gfxw-2hvv, PYSEC-2021-52
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p435-eq6q-6udb |
|
| 17 |
| url |
VCID-phas-8df3-mfez |
| vulnerability_id |
VCID-phas-8df3-mfez |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2021-3144, GHSA-w2hr-3mc8-46gh, PYSEC-2021-54
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-phas-8df3-mfez |
|
| 18 |
| url |
VCID-r3en-yzud-bqbm |
| vulnerability_id |
VCID-r3en-yzud-bqbm |
| summary |
An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
PYSEC-2021-362
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-r3en-yzud-bqbm |
|
| 19 |
| url |
VCID-t5b4-31st-b7er |
| vulnerability_id |
VCID-t5b4-31st-b7er |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/saltstack/salt |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/saltstack/salt |
|
| 5 |
|
| 6 |
| reference_url |
https://repo.saltproject.io |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://repo.saltproject.io |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.8 |
| purl |
pkg:pypi/salt@3002.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 3 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 4 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 5 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 6 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 7 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 8 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 9 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 10 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8 |
|
| 1 |
|
| 2 |
|
|
| aliases |
CVE-2022-22934, GHSA-2q4g-wfm6-5fpm, PYSEC-2022-171
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t5b4-31st-b7er |
|
| 20 |
|
| 21 |
|
| 22 |
| url |
VCID-wk15-cb1u-eqdq |
| vulnerability_id |
VCID-wk15-cb1u-eqdq |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2021-25281, GHSA-xxw3-765m-f37p, PYSEC-2021-50
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wk15-cb1u-eqdq |
|
| 23 |
| url |
VCID-xfxm-a3ku-a7h4 |
| vulnerability_id |
VCID-xfxm-a3ku-a7h4 |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2020-28243, GHSA-phhw-3wc9-8q75, PYSEC-2021-73
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xfxm-a3ku-a7h4 |
|
| 24 |
|
| 25 |
| url |
VCID-z8vc-drx3-h3an |
| vulnerability_id |
VCID-z8vc-drx3-h3an |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/salt@3002.5 |
| purl |
pkg:pypi/salt@3002.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1qwk-r5xw-rubd |
|
| 1 |
| vulnerability |
VCID-3q7a-nzue-5ken |
|
| 2 |
| vulnerability |
VCID-47fc-3b14-4uha |
|
| 3 |
| vulnerability |
VCID-785e-fxwd-s7bz |
|
| 4 |
| vulnerability |
VCID-894v-eb8v-p3dk |
|
| 5 |
| vulnerability |
VCID-axae-4zgs-9bfb |
|
| 6 |
| vulnerability |
VCID-bpp3-fcyq-2uaq |
|
| 7 |
| vulnerability |
VCID-gtes-baaj-7beu |
|
| 8 |
| vulnerability |
VCID-h7qv-ty6k-rkfg |
|
| 9 |
| vulnerability |
VCID-he35-2eaz-qkdq |
|
| 10 |
| vulnerability |
VCID-jnqb-7xsu-cyhp |
|
| 11 |
| vulnerability |
VCID-t5b4-31st-b7er |
|
| 12 |
| vulnerability |
VCID-ve75-ee6s-huhq |
|
| 13 |
| vulnerability |
VCID-vfyt-s2em-8kd4 |
|
| 14 |
| vulnerability |
VCID-z6cg-d8vs-tybn |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.5 |
|
|
| aliases |
CVE-2020-35662, GHSA-qx72-q6w3-qgc7, PYSEC-2021-75
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z8vc-drx3-h3an |
|