Salt (Vmware) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-06-13. Vendor: Vmware.
CVEs of Salt
- CVE-2024-38824 - CVSS 9.6 (critical), 2025-06-13: Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory.
- CVE-2025-22239 - CVSS 8.1 (high), 2025-06-13: Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's…
- CVE-2025-22242 - CVSS 5.6 (medium), 2025-06-13: Worker process denial of service through file read operation. .A vulnerability exists in the Master's “pub_ret” method which is exposed to all minions. The…
- CVE-2025-22238 - CVSS 4.2 (medium), 2025-06-13: Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged…
- CVE-2025-22241 - CVSS 5.6 (medium), 2025-06-13: File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki…
- CVE-2025-22237 - CVSS 6.7 (medium), 2025-06-13: An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary…
- CVE-2025-22240 - CVSS 6.3 (medium), 2025-06-13: Arbitrary directory creation or file deletion. In the find_file method of the GitFS class, a path is created using os.path.join using unvalidated input from…
- CVE-2025-22236 - CVSS 8.1 (high), 2025-06-13: Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>=…
- CVE-2024-38825 - CVSS 6.4 (medium), 2025-06-13: The salt.auth.pki module does not properly authenticate callers. The "password" field contains a public certificate which is validated against a CA…
- CVE-2024-38823 - CVSS 2.7 (low), 2025-06-13: Salt's request server is vulnerable to replay attacks when not using a TLS encrypted transport.
- CVE-2024-38822 - CVSS 2.7 (low), 2025-06-13: Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion.
