[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f62aSpivyrA4q62FJ5itqL4bl-mAlMSY7PQbuciBVdJM":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":92,"topProductsByCves":104,"seoMetadata":110,"meta":119},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":39},27781,"saltstack",5,55,3,209,"2023-09-05","s",[16,21,28,33,36],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},140775,"salt",197,51,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},140776,"salt_2015",7,2,0,"2017-10-10",{"id":29,"product_name":30,"version_count":31,"cve_count":31,"kev_count":26,"last_cve_update":32},140777,"salt_2018",1,"2019-07-18",{"id":34,"product_name":35,"version_count":31,"cve_count":31,"kev_count":26,"last_cve_update":32},140778,"salt_2019",{"id":37,"product_name":8,"version_count":11,"cve_count":31,"kev_count":26,"last_cve_update":38},140779,"2019-12-03","Saltstack is a technology vendor with 5 tracked products and 55 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[41,49,54,61,67,71,75,79,84,88],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":48},"CVE-2020-16846","An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.","2020-11-06",9.8,"v3.1","Critical",0.99585,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":53},"CVE-2020-11651","An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and\u002For run arbitrary commands on salt minions.","2020-04-30",0.96614,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":46,"severity":47,"isKev":59,"epssScore":60},"CVE-2021-25282","An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.","2021-02-27",9.1,false,0.92409,{"cveId":62,"description":63,"publishedDate":52,"cvssScore":64,"cvssVersion":46,"severity":65,"isKev":4,"epssScore":66},"CVE-2020-11652","An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.",6.5,"Medium",0.86178,{"cveId":68,"description":69,"publishedDate":57,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":59,"epssScore":70},"CVE-2021-25281","An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.",0.7313,{"cveId":72,"description":73,"publishedDate":57,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":59,"epssScore":74},"CVE-2021-3197","An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.",0.71684,{"cveId":76,"description":77,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":59,"epssScore":78},"CVE-2020-25592","In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.",0.56817,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":59,"epssScore":83},"CVE-2019-17361","In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.","2020-01-17",0.1516,{"cveId":85,"description":86,"publishedDate":57,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":59,"epssScore":87},"CVE-2021-25283","An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks.",0.10233,{"cveId":89,"description":90,"publishedDate":57,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":59,"epssScore":91},"CVE-2021-3148","An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt\u002Futils\u002Fthin.py.",0.08246,[93,98,101],{"cveId":50,"description":51,"publishedDate":52,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":53,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":97},"SaltStack Salt Authentication Bypass Vulnerability","2021-11-03","SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and\u002For run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.","Apply updates per vendor instructions.",{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":48,"cisaVulnName":99,"cisaDateAdded":95,"cisaShortDescription":100,"cisaRequiredAction":97},"SaltStack Salt Shell Injection Vulnerability","SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.",{"cveId":62,"description":63,"publishedDate":52,"cvssScore":64,"cvssVersion":46,"severity":65,"isKev":4,"epssScore":66,"cisaVulnName":102,"cisaDateAdded":95,"cisaShortDescription":103,"cisaRequiredAction":97},"SaltStack Salt Path Traversal Vulnerability","SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.",[105,106,107,108,109],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":31,"kev_count":26,"last_cve_update":32},{"id":34,"product_name":35,"version_count":31,"cve_count":31,"kev_count":26,"last_cve_update":32},{"id":37,"product_name":8,"version_count":11,"cve_count":31,"kev_count":26,"last_cve_update":38},{"title":111,"metaDescription":112,"keywords":113,"structuredData":114},"Saltstack - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Saltstack covering 5 products with 55 tracked vulnerabilities including 2 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Saltstack vulnerabilities, Saltstack security, Saltstack CVE, Saltstack threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Saltstack KEV, Saltstack exploited vulnerabilities",{"@context":115,"@type":116,"name":117,"description":112,"url":118},"https:\u002F\u002Fschema.org","Organization","Saltstack","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsaltstack",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":120,"apiVersion":121},"2026-10-28T15:47:33.419Z","3.0"]