Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1518-1 advisory.

  - The vulnerability is due to an input validation error when processing directory traversal sequences during     the creation of the Syndic cache directory on the Salt master.  (CVE-2024-22231)

  - This vulnerability could potentially allow an attacker to perform unauthorized actions or access     information they should not have access to. A specially crafted url can be created which leads to a     directory traversal in the salt file server. (CVE-2024-22232)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the instance of SaltStack hosted on the remote server is affected by multiple vulnerabilities: 

  - Syndic cache directory creation is vulnerable to a directory traversal attack. (CVE-2024-22231)

  - A specially crafted url can be created which leads to a directory traversal in the salt file server.     (CVE-2024-22232)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0506-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0513-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0509-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0508-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0507-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0510-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
195103	SUSE SLES15 Security Update : SUSE Manager Salt Bundle (SUSE-SU-2024:1518-1)	Nessus	SuSE Local Security Checks	high
190892	SaltStack 3000 < 3005.5 / 3006 < 3006.6 Multiple Vulnerablities	Nessus	Misc.	high
190657	SUSE SLES15 Security Update : salt (SUSE-SU-2024:0506-1)	Nessus	SuSE Local Security Checks	high
190653	SUSE SLES15 Security Update : SUSE Manager Server 4.3 (SUSE-SU-2024:0513-1)	Nessus	SuSE Local Security Checks	high
190651	SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2024:0509-1)	Nessus	SuSE Local Security Checks	high
190649	SUSE SLES15 Security Update : salt (SUSE-SU-2024:0508-1)	Nessus	SuSE Local Security Checks	high
190647	SUSE SLES15 Security Update : salt (SUSE-SU-2024:0507-1)	Nessus	SuSE Local Security Checks	high
190635	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : salt (SUSE-SU-2024:0510-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-22231

medium

Tenable Plugins

high

high

high

high

high

high

high

high