Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.
References
Configurations
Configuration 1 (hide)
|
History
13 Feb 2025, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash. |
21 Nov 2024, 07:41
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.2 |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/ - | |
| References | () https://saltproject.io/security-announcements/2023-08-10-advisory/ - Mitigation, Vendor Advisory |
14 Sep 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Sep 2023, 19:18
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:* | |
| First Time |
Saltstack salt
Saltstack |
|
| References | (MISC) https://saltproject.io/security-announcements/2023-08-10-advisory/ - Mitigation, Vendor Advisory | |
| CWE | NVD-CWE-noinfo |
05 Sep 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-05 11:15
Updated : 2025-02-13 17:16
NVD link : CVE-2023-20898
Mitre link : CVE-2023-20898
CVE.ORG link : CVE-2023-20898
JSON object : View
Products Affected
saltstack
- salt
CWE