VDB

BDU%3A2025-10869

BDU%3A2025-10869 PUBLISHED CVSS 9.600000381469727 CRITICAL

Уязвимость метода recv_file системы управления конфигурациями и удалённого выполнения операций Salt, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Risk Scores

CVSS 3.1
9.600000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Affected Products

VendorProductVersions
VMwareSALT3006.x, 3007.x
Novell Inc., ООО «Ред Софт», Fedora Project, SaltStack, IncopenSUSE Tumbleweed, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Micro, SUSE Manager Retail Branch Server, SUSE Manager Proxy, SUSE Manager Server, SUSE Enterprise Storage, Suse Linux Enterprise Server, SUSE Linux Enterprise High Performance Computing, SUSE Manager Server Module, Fedora, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Module for Basesystem, OpenSUSE Leap, SUSE Linux Enterprise Module for Server Applications, SUSE Manager Client Tools, SUSE Linux Enterprise Module for Transactional Server, SUSE Manager Proxy Module, Salt, Fedora EPEL, SUSE Linux Enterprise Module for Systems Management, SUSE Linux Micro

Timeline

  • Jun 13, 2025 CVE Published
  • Jun 13, 2025 PoC Published
  • Jun 13, 2025 PoC Published
  • Jun 13, 2025 PoC Published
  • Jun 13, 2025 PoC Published
  • Jun 13, 2025 PoC Published
  • Jun 22, 2025 PoC Published
  • Sep 9, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›