CVE-2024-38825 | VMware SALT prior 3006.12/3007.4 salt.auth.pki Password certificate validation

June 13, 2025 Yanac

A vulnerability was found in VMware SALT. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component salt.auth.pki. The manipulation of the argument Password leads to improper certificate validation.

This vulnerability is known as CVE-2024-38825. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More