SUSE-SU-2018:3815-1: salt&distro=SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2018:3815-1 is a vulnerability in salt&distro=SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 20-11-2018PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for salt This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitrary commands (bsc#1113699). Non-security issues fixed: - Improved handling of LDAP group id. gid is no longer treated as a string, which could have lead to faulty group creations (bsc#1113784). - Fixed async call to process manager (bsc#1110938). - Fixed OS arch detection when RPM is not installed (bsc#1114197).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- salt&distro=SUSE Linux Enterprise Module for Basesystem 15< 2018.3.0-5.20.1
- salt&distro=SUSE Linux Enterprise Module for Server Applications 15< 2018.3.0-5.20.1
1 vendor · 2 products