Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to     bypass newer authentication/security features by using an older request payload format, enabling minion     impersonation and circumventing protections introduced in response to prior issues. (CVE-2025-62349)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to
    bypass newer authentication/security features by using an older request payload format, enabling minion
    impersonation and circumventing protections introduced in response to prior issues. (CVE-2025-62349)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4467-1 advisory.

    venv-salt-minion:

    - Security issues fixed:

      - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
      - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
      - Backport security fixes for vendored tornado
        * BDSA-2024-3438
        * BDSA-2024-3439
        * BDSA-2024-9026


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4475-1 advisory.

    - Security issues fixed:

      - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
      - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
      - Backport security fixes for vendored tornado
        * BDSA-2024-3438
        * BDSA-2024-3439
        * BDSA-2024-9026


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4478-1 advisory.

    - Security issues fixed:

      - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
      - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
      - Backport security fixes for vendored tornado
        * BDSA-2024-3438
        * BDSA-2024-3439
        * BDSA-2024-9026


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4476-1 advisory.

    - Security issues fixed:

      - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
      - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
      - Backport security fixes for vendored tornado
        * BDSA-2024-3438
        * BDSA-2024-3439
        * BDSA-2024-9026


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4477-1 advisory.

    - Security issues fixed:

      - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
      - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
      - Backport security fixes for vendored tornado
        * BDSA-2024-3438
        * BDSA-2024-3439
        * BDSA-2024-9026


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4479-1 advisory.

    release-notes-susemanager:

    - Update to SUSE Manager 4.3.16.2
      * SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled
      * CVEs Fixed:
        CVE-2025-11065, CVE-2025-64751, CCVE-2025-47911, CVE-2025-58190         CVE-2025-62349, CVE-2025-62348
      * Bugs mentioned:
        bsc#1237060, bsc#1241455, bsc#1250911, bsc#1251864, bsc#1253024

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload
    processed by the junos module could lead to unintended code execution under the context of the Salt
    process. (CVE-2025-62348)

  - Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to
    bypass newer authentication/security features by using an older request payload format, enabling minion
    impersonation and circumventing protections introduced in response to prior issues. (CVE-2025-62349)

ID	Name	Product	Family	Severity
297654	Linux Distros Unpatched Vulnerability : CVE-2025-62349	Nessus	Misc.	high
437411	SCA: security update for salt (GHSA-vcf3-26xf-fw4m)	Tenable Cloud Security	SCA Checks	high
437411	SCA: security update for salt (GHSA-vcf3-26xf-fw4m)	Tenable Self-Hosted Container Security	SCA Checks	high
279377	SUSE SLES15 : Security update 5.0.6 for Multi-Linux Manager Salt Bundle (SUSE-SU-2025:4467-1)	Nessus	SuSE Local Security Checks	high
279372	SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2025:4475-1)	Nessus	SuSE Local Security Checks	high
279364	SUSE SLES15: python311-salt / salt / salt-api / salt-bash-completion / salt-doc / etc (SUSE-SU-2025:4478-1)	Nessus	SuSE Local Security Checks	high
279363	SUSE SLES15: python3-salt / python311-salt / salt / salt-api / etc (SUSE-SU-2025:4476-1)	Nessus	SuSE Local Security Checks	high
279360	SUSE SLED15: python3-salt / python3-salt-testsuite / python311-salt / salt / etc (SUSE-SU-2025:4477-1)	Nessus	SuSE Local Security Checks	high
279354	SUSE SLES15 : Security update 4.3.16.2 for Multi-Linux Manager Server LTS (SUSE-SU-2025:4479-1)	Nessus	SuSE Local Security Checks	high
436164	Alpine: multiple salt-lts packages: security update to 3006.17-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
436164	Alpine: multiple salt-lts packages: security update to 3006.17-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
436163	Alpine: multiple salt packages: security update to 3007.9-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
436163	Alpine: multiple salt packages: security update to 3007.9-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2025-62349

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high