Paper/Archive/CVE-2024-38824

CVE-2024-38824

VMware SALT — CVE-2024-38824 salt advisory

EPSS 1%CVSS 9.6

critical.is priorityof 100

42

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 63.9.639 × 2012.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory.

Affected

ProductAffectedFixed inSource

SALT3006.x – < 3006.123006.12CNA

SALT3007.x – < 3007.43007.4CNA

Scores by source

vmware (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refdocs.saltproject.io/en/3006/topics/releases/3006.12.html refdocs.saltproject.io/en/3007/topics/releases/3007.4.html