CVE-2020-11652

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 30-04-2020 07:15

Last modified: - 03-05-2022 04:21

Total changes: - 3

Description

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

High

Confidentiality

None

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

6.5

Base score

2.8

3.6

Exploitability score

Impact score

Verification logic

vendor=saltstack AND product=salt AND versionEndExcluding=2019.2.4

vendor=saltstack AND product=salt AND versionStartIncluding=3000 AND versionEndExcluding=3000.2

vendor=opensuse AND product=leap AND version=15.1

vendor=Debian AND product=debian_linux AND version=8.0

vendor=Debian AND product=debian_linux AND version=9.0

vendor=Debian AND product=debian_linux AND version=10.0

vendor=canonical AND product=ubuntu_linux AND version=16.04 AND software_edition=esm

vendor=canonical AND product=ubuntu_linux AND version=18.04 AND software_edition=lts

vendor=blackberry AND product=workspaces_server AND versionEndIncluding=7.1.3

vendor=blackberry AND product=workspaces_server AND versionEndIncluding=8.2.6 AND versionStartIncluding=8.0.0

vendor=blackberry AND product=workspaces_server AND version=9.1.0

vendor=vmware AND product=application_remote_collector AND version=7.5.0

vendor=vmware AND product=application_remote_collector AND version=8.0.0

Reference

https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html
https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst
openSUSE-SU-2020:0564-Mailing List, Third Party Advisory
http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
DSA-4676-Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2020-0009.html
http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html
20200528 SaltStack FrameWork Vulnerabilities Affecting Cisco Products-Third Party Advisory
[debian-lts-announce] 20200530 [SECURITY] [DLA 2223-1] salt security update-Mailing List, Third Party Advisory
http://support.blackberry.com/kb/articleDetail?articleNumber=000063758
openSUSE-SU-2020:1074-Mailing List, Third Party Advisory
USN-4459-1-Third Party Advisory

Keywords

CVE-2020-11652

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-11652

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures