VDB

BDU%3A2025-10849

BDU%3A2025-10849 PUBLISHED CVSS 6.400000095367432 MEDIUM

Уязвимость компонента salt.auth.pki системы управления конфигурациями и удалённого выполнения операций Salt, позволяющая нарушителю обойти процесс аутентификации

Risk Scores

CVSS 3.1
6.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Novell Inc., ООО «Ред Софт», Fedora Project, SaltStack, IncopenSUSE Tumbleweed, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Micro, SUSE Manager Retail Branch Server, SUSE Manager Proxy, SUSE Manager Server, SUSE Enterprise Storage, Suse Linux Enterprise Server, SUSE Linux Enterprise High Performance Computing, SUSE Manager Server Module, Fedora, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Module for Basesystem, OpenSUSE Leap, SUSE Linux Enterprise Module for Server Applications, SUSE Manager Client Tools, SUSE Linux Enterprise Module for Transactional Server, SUSE Manager Proxy Module, Salt, Fedora EPEL, SUSE Linux Enterprise Module for Systems Management, SUSE Linux Micro
VMwareSALT3006.x, 3007.x

Timeline

  • Jun 13, 2025 CVE Published
  • Jun 13, 2025 PoC Published
  • Jun 13, 2025 PoC Published
  • Jun 13, 2025 PoC Published
  • Sep 8, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›