Advisory Database
  • Advisories
  • Dependency Scanning
  1. pypi
  2. ›
  3. salt
  4. ›
  5. CVE-2023-34049

CVE-2023-34049: Salt preflight script could be attacker controlled

November 14, 2024

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.

References

  • github.com/advisories/GHSA-4277-m35q-7c9w
  • github.com/saltstack/salt
  • github.com/saltstack/salt/commit/286d55eb5a6e6bf9428405bdf5632b419bdf8444
  • github.com/saltstack/salt/commit/7a14112f2a16ce70e3c3e1862c92e37af5f2c7a4
  • nvd.nist.gov/vuln/detail/CVE-2023-34049
  • saltproject.io/security-announcements/2023-10-27-advisory

Code Behaviors & Features

Detect and mitigate CVE-2023-34049 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions starting from 3006.0rc1 before 3006.4, all versions before 3005.4

Fixed versions

  • 3005.4
  • 3006.4

Solution

Upgrade to versions 3005.4, 3006.4 or above.

Impact 6.7 MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Learn more about CVSS

Weakness

  • CWE-340: Generation of Predictable Numbers or Identifiers

Source file

pypi/salt/CVE-2023-34049.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:17:26 +0000.