CVE-2023-34049

Summary

CVE-2023-34049 is a vulnerability affecting Salt-SSH, an open-source configuration management software. The pre-flight option in Salt-SSH copies a script to the target VM at a predictable path during the execution of a state or top file. An attacker with access to the target VM can exploit this vulnerability by placing a malicious script at the predictable path and ensuring Salt-SSH runs their script, gaining privileges equivalent to the user running Salt-SSH. To mitigate this vulnerability, it is recommended to avoid making the copy path on the target predictable and to check return codes of the scp command if the copy fails.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.