CVE-2018-15750: Directory Traversal vulnerability in salt-api in SaltStack Salt
Summary
CVE-2018-15750: Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server. Affects salt across 2 version ranges.
< 2017.7.8
>= 2018.3.0, < 2018.3.3
Fixed in 2017.7.8 or 2018.3.3, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
SaltStack Salt is an open-source configuration management and remote execution software. It is designed to manage and automate the infrastructure of large-scale computer systems. The salt-api component provides a RESTful API for SaltStack Salt, allowing remote access and control of SaltStack Salt functionality. This vulnerability affects versions before 2017.7.8 and 2018.3.x before 2018.3.3.
Vulnerability Detail
The vulnerability identified as CVE-2018-15750 is a Directory Traversal vulnerability in salt-api. It allows remote attackers to determine which files exist on the server. By exploiting this vulnerability, an attacker can traverse directories and access sensitive files, potentially leading to unauthorized disclosure of information or further attacks.
How To Fix
Latest published version: 3008.3.0 as of 22 Oct 2026
pip install --upgrade "salt==3008.3.0"Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 2017.7.82017.7.8pip install --upgrade "salt==2017.7.8" -
>= 2018.3.0, < 2018.3.32018.3.3pip install --upgrade "salt==2018.3.3"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the fix by upgrading to the recommended versions.
Conclusion
The Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server. It is crucial to upgrade to the fixed versions to mitigate the risk of unauthorized disclosure of sensitive information. For additional support, please contact DevNack.com.
See every vulnerability recorded for salt →
FAQ
This vulnerability allows remote attackers to determine which files exist on the server, potentially leading to unauthorized disclosure of sensitive information.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock and it will alert you in real-time.
There are no known public exploits available for this vulnerability at the time of this report. However, it is important to patch your installation to prevent potential attacks.
For more detailed information about this vulnerability, you can refer to the official advisory database at https://github.com/pypa/advisory-database/blob/main/vulns/salt/PYSEC-2018-29.yaml
For further support on vulnerability remediation, you can contact info@devnack.com. They can provide assistance and guidance in addressing this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for salt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
