netVigilance Vulnerability intelligence since 2004

SaltStack

3 SaltStack vulnerabilities with confirmed exploitation in the wild, as published by CISA; 3 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for SaltStack
Vulnerability Status
overdue 1591d2022-05-03 CVE-2020-16846 SaltStack / Salt SaltStack Salt Shell Injection Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2020-11652 SaltStack / Salt SaltStack Salt Path Traversal Vulnerability 2021-11-03 6.5 past due
overdue 1591d2022-05-03 CVE-2020-11651 SaltStack / Salt SaltStack Salt Authentication Bypass Vulnerability 2021-11-03 9.8 past due