SaltStack · Salt
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
Nedir
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.
CISA: SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and/or run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.
Ne yapmalı
Apply updates per vendor instructions.
ABD federal kurumları için son tarih: 3 Mayıs 2022
- CISA listesine eklenme
- 3 Kasım 2021
- Yayımlanma
- 30 Nisan 2020
- Önem
- Kritik 9,8 CVSS 3.1
- Önümüzdeki 30 günde saldırı olasılığı (EPSS)
- 97% bilinen tüm açıkların en üstteki 0,1% diliminde
- Daha fazla ayrıntı
- NVD · CVE.org · CISA
Tüm kaynaklar (11)
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html
- https://www.debian.org/security/2020/dsa-4676
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html
- https://usn.ubuntu.com/4459-1/
- https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html
- https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst
- http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
- http://www.vmware.com/security/advisories/VMSA-2020-0009.html
- http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Executio…
- https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html
SaltStack için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 3 Kas 2021 | Path Traversal | Salt | Orta 6,5 | 86% |
| 3 Kas 2021 | Shell Injection | Salt | Kritik 9,8 | 99,6% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.