Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-11651

salt: salt-master process ClearFuncs class does not properly validate method calls

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.

CVSS 3.1 · 9.8 Critical EPSS 96.6% KEV · Listed
Vendors
Canonical Debian Opensuse and 2 more
Products
Ubuntu Linux Debian Linux Leap and 2 more
CVE-2020-11652

salt: salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

CVSS 3.1 · 6.5 Medium EPSS 86.4% KEV · Listed
Vendors
Blackberry Canonical Debian and 3 more
Products
Workspaces Server Ubuntu Linux Debian Linux and 3 more