Detections
Analytics

Alpine: multiple salt-lts packages: security update to 3006.17-r0

high Tenable Self-Hosted Container Security Plugin ID 436164

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

 - Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload
 processed by the junos module could lead to unintended code execution under the context of the Salt
 process. (CVE-2025-62348)

 - Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to
 bypass newer authentication/security features by using an older request payload format, enabling minion
 impersonation and circumventing protections introduced in response to prior issues. (CVE-2025-62349)

See Also

https://security.alpinelinux.org/vuln/CVE-2025-62348

https://security.alpinelinux.org/vuln/CVE-2025-62349

Plugin Details

Severity: High

ID: 436164

Version: Revision 1.13

Type: Local

Published: 11/25/2025

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.88

CVSS v4

Risk Factor: High

Base Score: 7.5

Threat Score: 4.6

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

CVSS Score Source: CVE-2025-62349

Vulnerability Information

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2025-62348, CVE-2025-62349