A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A specially crafted url can be created which leads to a directory traversal in the salt file server. A     malicious user can read an arbitrary file from a Salt master's filesystem. (CVE-2024-22232)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202412-09 (Salt: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1518-1 advisory.

  - The vulnerability is due to an input validation error when processing directory traversal sequences during     the creation of the Syndic cache directory on the Salt master.  (CVE-2024-22231)

  - This vulnerability could potentially allow an attacker to perform unauthorized actions or access     information they should not have access to. A specially crafted url can be created which leads to a     directory traversal in the salt file server. (CVE-2024-22232)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the instance of SaltStack hosted on the remote server is affected by multiple vulnerabilities: 

  - Syndic cache directory creation is vulnerable to a directory traversal attack. (CVE-2024-22231)

  - A specially crafted url can be created which leads to a directory traversal in the salt file server.     (CVE-2024-22232)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0506-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0513-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0509-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0508-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0507-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0510-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
260558	Linux Distros Unpatched Vulnerability : CVE-2024-22232	Nessus	Misc.	high
212187	GLSA-202412-09 : Salt: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
195103	SUSE SLES15 Security Update : SUSE Manager Salt Bundle (SUSE-SU-2024:1518-1)	Nessus	SuSE Local Security Checks	high
190892	SaltStack 3000 < 3005.5 / 3006 < 3006.6 Multiple Vulnerablities	Nessus	Misc.	high
190657	SUSE SLES15 Security Update : salt (SUSE-SU-2024:0506-1)	Nessus	SuSE Local Security Checks	high
190653	SUSE SLES15 Security Update : SUSE Manager Server 4.3 (SUSE-SU-2024:0513-1)	Nessus	SuSE Local Security Checks	high
190651	SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2024:0509-1)	Nessus	SuSE Local Security Checks	high
190649	SUSE SLES15 Security Update : salt (SUSE-SU-2024:0508-1)	Nessus	SuSE Local Security Checks	high
190647	SUSE SLES15 Security Update : salt (SUSE-SU-2024:0507-1)	Nessus	SuSE Local Security Checks	high
190635	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : salt (SUSE-SU-2024:0510-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-22232

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high