PT-2026-5435 · Salt+1 · Salt+1
Barney Sowood
·
Publicado
2025-11-28
·
Atualizado
2026-04-01
·
CVE-2025-62349
CVSS v2.0
8.0
Alta
| Vetor | AV:N/AC:L/Au:M/C:C/I:C/A:P |
Name of the Vulnerable Software and Affected Versions
Salt (affected versions not specified)
Description
Salt is susceptible to an authentication protocol version downgrade. A malicious minion can exploit this to bypass newer authentication and security features by utilizing an older request payload format. This allows for minion impersonation and circumvents security measures implemented to address previous issues.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Red Os
Salt