CVE-2024-38825: falha de média gravidade em VMware SALT
CVE-2024-38825 Salt Advisory
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.4epss 0.2%
The salt.auth.pki module does not properly authenticate callers. The "password" field contains a public certificate which is validated against a CA certificate by the module. This is not pki authentication, as the caller does not need access to the corresponding private key for the authentication attempt to be accepted.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Produtos afetados
VMware · SALTCVEs relacionadas — VMware SALT
No mesmo produto, das mais perigosas para as menos.
CVE-2024-38824CRITICALCVE-2024-38824 salt advisoryEPSS 1.1%CVE-2025-22238MEDIUMCVE-2025-22238 salt advisoryEPSS 0.3%CVE-2024-38823LOWCVE-2024-38823 Salt AdvisoryEPSS 0.3%CVE-2024-38822LOWCVE-2024-38822 Salt AdvisoryEPSS 0.3%CVE-2025-22241MEDIUMCVE-2025-22241 salt advisoryEPSS 0.2%CVE-2025-22239HIGHCVE-2025-22239 salt advisoryEPSS 0.2%