SaltStack · Salt
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
Cos'è
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.
CISA: SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and/or run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.
Cosa fare
Apply updates per vendor instructions.
Scadenza per le agenzie federali USA: 3 maggio 2022
- Aggiunta all'elenco CISA
- 3 novembre 2021
- Pubblicato
- 30 aprile 2020
- Gravità
- Critica 9,8 CVSS 3.1
- Probabilità di attacchi nei prossimi 30 giorni (EPSS)
- 97% tra il 0,1% più alto di tutte le vulnerabilità note
- Più dettagli
- NVD · CVE.org · CISA
Tutte le fonti (11)
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html
- https://www.debian.org/security/2020/dsa-4676
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
- https://usn.ubuntu.com/4459-1/
- https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html
- https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst
- http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
- http://www.vmware.com/security/advisories/VMSA-2020-0009.html
- http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Executio…
- https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html
Altre falle sfruttate di SaltStack
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 3 nov 2021 | Path Traversal | Salt | Media 6,5 | 86% |
| 3 nov 2021 | Shell Injection | Salt | Critica 9,8 | 99,6% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.