Vulnerability · Published Nov 14, 2024 · Assigned by vmware
CVE-2023-34049Salt security advisory release - 2023-OCT-27
Medium 6.7
In plain English
A medium-severity security flaw in SALT from Salt. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | salt | 3005.4 | GHSA-4277-m35q-7c9w |
| PyPI | salt | 3006.4 | GHSA-4277-m35q-7c9w |
| PyPI | salt | 3005.4, 3006.4 | PYSEC-2026-1892 |
| Ubuntu:22.04:LTS | salt | no fix listed | UBUNTU-CVE-2023-34049 |