Back to search
CVE-2018-15750
Published: Oct 24, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html
x_refsource_CONFIRM
https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
x_refsource_CONFIRM
[salt-users] 20181024 2018.3.3 Released - Security Advisory
mailing-list
x_refsource_MLIST
[salt-users] 20181024 2017.7.8 Released - Security Advisory
mailing-list
x_refsource_MLIST
openSUSE-SU-2020:1074
vendor-advisory
x_refsource_SUSE
[debian-lts-announce] 20200728 [SECURITY] [DLA 2294-1] salt security update
mailing-list
x_refsource_MLIST
USN-4459-1
vendor-advisory
x_refsource_UBUNTU
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now