CVE-2020-11652
100Vexday Risk Score
Corrija agora. Ela está sob exploração confirmada pelo CISA e tem exploit funcional público.
ssvc Actcvss 6.5epss 86%
da publicação à arma4 dias
Publicada no NVD30 de abr.
1ª PoC+4d
metasploit30 de abr.
CISA KEV+552d
probabilidade de exploração
86%top 1% das CVEs
exploração observada
simCISA + VulnCheck
13 exploit(s) público(s)
Ação exigida pela CISAprazo federal: 2022-05-03
Apply updates per vendor instructions.
Versões
Afetadas
pip/salt < 2019.2.4; pip/salt >= 3000, < 3000.2
Corrigidas em
pip/salt 2019.2.4; pip/salt 3000.2
Pesquisado e redigido com IA a partir do advisory do fornecedor e de análises públicas, com as fontes acima. Confira sempre a versão corrigida no advisory oficial antes de agir.
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
n/a · n/aPoCs públicas encontradas — 13
exploitdbwww.exploit-db.com/exploits/48421não verificadogithubgithub.com/Al1ex/CVE-2020-11652★ 6githubgithub.com/limon768/CVE-2020-11652-POC★ 4githubgithub.com/fanjq99/CVE-2020-11652★ 0vulncheckvulncheck.com/xdb/11b5248fe04cnão verificadovulncheckvulncheck.com/xdb/a45373fdc023não verificadovulncheckvulncheck.com/xdb/d28267b60453não verificadovulncheckvulncheck.com/xdb/5840ac3783acnão verificadocve_referencepacketstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.htmlnão verificadovulncheckvulncheck.com/xdb/cf1bedb2b8aanão verificadocve_referencepacketstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.htmlnão verificadovulncheckvulncheck.com/xdb/d7a39011635dnão verificadovulncheckvulncheck.com/xdb/d9b31f42dc98não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.htmlhttp://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.htmlhttps://docs.saltstack.com/en/latest/topics/releases/2019.2.4.htmlhttps://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rsthttps://lists.debian.org/debian-lts-announce/2020/05/msg00027.htmlhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AGhttp://support.blackberry.com/kb/articleDetail?articleNumber=000063758https://usn.ubuntu.com/4459-1/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11652https://www.debian.org/security/2020/dsa-4676