CVE-2024-22231

2024-06-2707:15:52

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-22231

syndic cache

directory traversal

salt master

vulnerability

unix

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

AI Score

6.1

Confidence

High

EPSS

Percentile

9.1%

JSON

Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchsalt< 3006.6-r0UNKNOWN
Alpine3.19-communitynoarchsalt< 3006.6-r0UNKNOWN
Alpine3.20-communitynoarchsalt< 3006.6-r0UNKNOWN