SUSE-SU-2024:1518-1
Vulnerability from csaf_suse - Published: 2024-05-06 09:49 - Updated: 2026-09-20 15:48Summary
Security update for SUSE Manager Salt Bundle
Severity
Important
Notes
Title of the patch: Security update for SUSE Manager Salt Bundle
Description of the patch:
This update fixes the following issues:
venv-salt-minion:
- Security issues fixed:
* CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430)
* CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file method (bsc#1219431)
- Bugs fixed:
* Convert oscap output to UTF-8
* Make Salt compatible with Python 3.11
* Ignore non-ascii chars in oscap output (bsc#1219001)
* Fix detected issues in Salt tests when running on VMs
* Make importing seco.range thread safe (bsc#1211649)
* Fix problematic tests and allow smooth tests executions on containers
* Discover Ansible playbook files as '*.yml' or '*.yaml' files (bsc#1211888)
* Prevent exceptions with fileserver.update when called via state (bsc#1218482)
* Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850)
* Fixed KeyError in logs when running a state that fails
Patchnames: SUSE-2024-1518,SUSE-SLE-Manager-Tools-15-2024-1518,SUSE-SLE-Manager-Tools-For-Micro-5-2024-1518,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-1518,SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-1518
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5 (Medium)
Affected products
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
15 products, the same list as for
CVE-2024-22231
Threats
Impact
important
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for SUSE Manager Salt Bundle",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n * CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430)\n * CVE-2024-22232: Prevent directory traversal attacks in the master\u0027s serve_file method (bsc#1219431)\n \n- Bugs fixed:\n\n * Convert oscap output to UTF-8\n * Make Salt compatible with Python 3.11\n * Ignore non-ascii chars in oscap output (bsc#1219001)\n * Fix detected issues in Salt tests when running on VMs\n * Make importing seco.range thread safe (bsc#1211649)\n * Fix problematic tests and allow smooth tests executions on containers\n * Discover Ansible playbook files as \u0027*.yml\u0027 or \u0027*.yaml\u0027 files (bsc#1211888)\n * Prevent exceptions with fileserver.update when called via state (bsc#1218482)\n * Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850)\n * Fixed KeyError in logs when running a state that fails\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-1518,SUSE-SLE-Manager-Tools-15-2024-1518,SUSE-SLE-Manager-Tools-For-Micro-5-2024-1518,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-1518,SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-1518",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1518-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:1518-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20241518-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:1518-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-May/035161.html"
},
{
"category": "self",
"summary": "SUSE Bug 1211649",
"url": "https://bugzilla.suse.com/1211649"
},
{
"category": "self",
"summary": "SUSE Bug 1211888",
"url": "https://bugzilla.suse.com/1211888"
},
{
"category": "self",
"summary": "SUSE Bug 1216850",
"url": "https://bugzilla.suse.com/1216850"
},
{
"category": "self",
"summary": "SUSE Bug 1218482",
"url": "https://bugzilla.suse.com/1218482"
},
{
"category": "self",
"summary": "SUSE Bug 1219001",
"url": "https://bugzilla.suse.com/1219001"
},
{
"category": "self",
"summary": "SUSE Bug 1219430",
"url": "https://bugzilla.suse.com/1219430"
},
{
"category": "self",
"summary": "SUSE Bug 1219431",
"url": "https://bugzilla.suse.com/1219431"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-22231 page",
"url": "https://www.suse.com/security/cve/CVE-2024-22231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-22232 page",
"url": "https://www.suse.com/security/cve/CVE-2024-22232/"
}
],
"title": "Security update for SUSE Manager Salt Bundle",
"tracking": {
"current_release_date": "2026-09-20T15:48:19Z",
"generator": {
"date": "2024-05-06T09:49:26Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:1518-1",
"initial_release_date": "2024-05-06T09:49:26Z",
"revision_history": [
{
"date": "2024-05-06T09:49:26Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T15:48:19Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "saltbundlepy-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy@3.10.14-150000.3.29.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-base-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-base-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-base-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-base@3.10.14-150000.3.29.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-curses@3.10.14-150000.3.29.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-dbm@3.10.14-150000.3.29.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-devel@3.10.14-150000.3.29.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-libs@3.10.14-150000.3.29.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.aarch64",
"product": {
"name": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.aarch64",
"product_id": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml@4.9.3-150000.3.21.1?arch=aarch64\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.aarch64",
"product": {
"name": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.aarch64",
"product_id": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-devel@4.9.3-150000.3.21.1?arch=aarch64\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-testsuite@3.10.14-150000.3.29.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tk@3.10.14-150000.3.29.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.aarch64",
"product": {
"name": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.aarch64",
"product_id": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tools@3.10.14-150000.3.29.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"product": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"product_id": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/venv-salt-minion@3006.0-150000.3.54.3?arch=aarch64\u0026upstream=venv-salt-minion-0:3006.0-150000.3.54.3.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "saltbundlepy-lxml-doc-0:4.9.3-150000.3.21.1.noarch",
"product": {
"name": "saltbundlepy-lxml-doc-0:4.9.3-150000.3.21.1.noarch",
"product_id": "saltbundlepy-lxml-doc-0:4.9.3-150000.3.21.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-doc@4.9.3-150000.3.21.1?arch=noarch\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "saltbundlepy-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy@3.10.14-150000.3.29.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-base-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-base-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-base-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-base@3.10.14-150000.3.29.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-curses@3.10.14-150000.3.29.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-dbm@3.10.14-150000.3.29.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-devel@3.10.14-150000.3.29.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-libs@3.10.14-150000.3.29.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.ppc64le",
"product": {
"name": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.ppc64le",
"product_id": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml@4.9.3-150000.3.21.1?arch=ppc64le\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.ppc64le",
"product": {
"name": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.ppc64le",
"product_id": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-devel@4.9.3-150000.3.21.1?arch=ppc64le\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-testsuite@3.10.14-150000.3.29.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tk@3.10.14-150000.3.29.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.ppc64le",
"product": {
"name": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.ppc64le",
"product_id": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tools@3.10.14-150000.3.29.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"product": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"product_id": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/venv-salt-minion@3006.0-150000.3.54.3?arch=ppc64le\u0026upstream=venv-salt-minion-0:3006.0-150000.3.54.3.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "saltbundlepy-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy@3.10.14-150000.3.29.1?arch=s390x\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-base-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-base-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-base-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-base@3.10.14-150000.3.29.1?arch=s390x\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-curses@3.10.14-150000.3.29.1?arch=s390x\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-dbm@3.10.14-150000.3.29.1?arch=s390x\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-devel@3.10.14-150000.3.29.1?arch=s390x\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-libs@3.10.14-150000.3.29.1?arch=s390x\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.s390x",
"product": {
"name": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.s390x",
"product_id": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml@4.9.3-150000.3.21.1?arch=s390x\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.s390x",
"product": {
"name": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.s390x",
"product_id": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-devel@4.9.3-150000.3.21.1?arch=s390x\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-testsuite@3.10.14-150000.3.29.1?arch=s390x\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tk@3.10.14-150000.3.29.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.s390x",
"product": {
"name": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.s390x",
"product_id": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tools@3.10.14-150000.3.29.1?arch=s390x\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"product": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"product_id": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/venv-salt-minion@3006.0-150000.3.54.3?arch=s390x\u0026upstream=venv-salt-minion-0:3006.0-150000.3.54.3.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "saltbundlepy-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy@3.10.14-150000.3.29.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-base-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-base-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-base-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-base@3.10.14-150000.3.29.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-curses-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-curses@3.10.14-150000.3.29.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-dbm-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-dbm@3.10.14-150000.3.29.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-devel-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-devel@3.10.14-150000.3.29.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-libs-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-libs@3.10.14-150000.3.29.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.x86_64",
"product": {
"name": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.x86_64",
"product_id": "saltbundlepy-lxml-0:4.9.3-150000.3.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml@4.9.3-150000.3.21.1?arch=x86_64\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.x86_64",
"product": {
"name": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.x86_64",
"product_id": "saltbundlepy-lxml-devel-0:4.9.3-150000.3.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-devel@4.9.3-150000.3.21.1?arch=x86_64\u0026upstream=saltbundlepy-lxml-0:4.9.3-150000.3.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-testsuite-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-testsuite@3.10.14-150000.3.29.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-tk-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tk@3.10.14-150000.3.29.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.x86_64",
"product": {
"name": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.x86_64",
"product_id": "saltbundlepy-tools-0:3.10.14-150000.3.29.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tools@3.10.14-150000.3.29.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.10.14-150000.3.29.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"product": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"product_id": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/venv-salt-minion@3006.0-150000.3.54.3?arch=x86_64\u0026upstream=venv-salt-minion-0:3006.0-150000.3.54.3.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Manager Client Tools 15",
"product": {
"name": "SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15"
}
},
{
"category": "product_name",
"name": "SUSE Manager Client Tools for SLE Micro 5",
"product": {
"name": "SUSE Manager Client Tools for SLE Micro 5",
"product_id": "SUSE Manager Client Tools for SLE Micro 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-manager-tools-micro:5"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy Module 4.3",
"product": {
"name": "SUSE Manager Proxy Module 4.3",
"product_id": "SUSE Manager Proxy Module 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server Module 4.3",
"product": {
"name": "SUSE Manager Server Module 4.3",
"product_id": "SUSE Manager Server Module 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-suse-manager-server:4.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.s390x"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64 as component of SUSE Manager Client Tools for SLE Micro 5",
"product_id": "SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools for SLE Micro 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x as component of SUSE Manager Client Tools for SLE Micro 5",
"product_id": "SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.s390x"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools for SLE Micro 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64 as component of SUSE Manager Client Tools for SLE Micro 5",
"product_id": "SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools for SLE Micro 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64 as component of SUSE Manager Proxy Module 4.3",
"product_id": "SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"relates_to_product_reference": "SUSE Manager Proxy Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le as component of SUSE Manager Proxy Module 4.3",
"product_id": "SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"relates_to_product_reference": "SUSE Manager Proxy Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x as component of SUSE Manager Proxy Module 4.3",
"product_id": "SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"relates_to_product_reference": "SUSE Manager Proxy Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64 as component of SUSE Manager Proxy Module 4.3",
"product_id": "SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64 as component of SUSE Manager Server Module 4.3",
"product_id": "SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"relates_to_product_reference": "SUSE Manager Server Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le as component of SUSE Manager Server Module 4.3",
"product_id": "SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"relates_to_product_reference": "SUSE Manager Server Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x as component of SUSE Manager Server Module 4.3",
"product_id": "SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"relates_to_product_reference": "SUSE Manager Server Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64 as component of SUSE Manager Server Module 4.3",
"product_id": "SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
},
"product_reference": "venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"relates_to_product_reference": "SUSE Manager Server Module 4.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-22231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-22231"
}
],
"notes": [
{
"category": "general",
"text": "Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-22231",
"url": "https://www.suse.com/security/cve/CVE-2024-22231"
},
{
"category": "external",
"summary": "SUSE Bug 1219430 for CVE-2024-22231",
"url": "https://bugzilla.suse.com/1219430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-06T09:49:26Z",
"details": "moderate"
}
],
"title": "CVE-2024-22231"
},
{
"cve": "CVE-2024-22232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-22232"
}
],
"notes": [
{
"category": "general",
"text": "A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master\u0027s filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-22232",
"url": "https://www.suse.com/security/cve/CVE-2024-22232"
},
{
"category": "external",
"summary": "SUSE Bug 1219431 for CVE-2024-22232",
"url": "https://bugzilla.suse.com/1219431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools 15:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Proxy Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.aarch64",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.ppc64le",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.s390x",
"SUSE Manager Server Module 4.3:venv-salt-minion-0:3006.0-150000.3.54.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-06T09:49:26Z",
"details": "important"
}
],
"title": "CVE-2024-22232"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.