Saltstack Salt

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.CVE-2021-21996Saltstack · 3.4% likely
2. An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose acco…CVE-2022-22967Saltstack · CVSS 8.8 · 2.1% likely

   CWE-863

3. An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process…CVE-2022-22935Saltstack · CVSS 3.7 · 1.5% likely

   CWE-287

4. An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publ…CVE-2022-22941Saltstack · CVSS 8.8 · 1.3% likely

   CWE-732

5. An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attacke…CVE-2022-22934Saltstack · 0.9% likely
6. An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in a…CVE-2022-22936Saltstack · CVSS 8.8 · 0.8% likely

   CWE-294

7. An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the ins…CVE-2021-22004Saltstack · 0.4% likely

   CWE-362

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.