Application Remote Collector vulnerabilities

2 known vulnerabilities in Application Remote Collector from VMware. 1 is rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.5 Medium severity

  SaltStack Salt Path Traversal Exploited

  CVE-2020-11652Apr 30, 2020SaltstackEPSS 86.4%

  An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

• 9.8 Critical severity

  SaltStack Salt Authentication Bypass Exploited

  CVE-2020-11651Apr 30, 2020SaltstackEPSS 96.6%

  An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be us