by Kastro
Paper/Archive/CVE-2020-16846

CVE-2020-16846

SaltStack Salt — SaltStack Salt Shell Injection Vulnerability

KEV · due 3 MayEPSS 100%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.9.999 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refgithub.com/saltstack/salt/releasesrefsaltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cvesadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMAadvisorylists.opensuse.org/opensuse-security-announce/2020-11/msg00029.htmladvisorysecurity.gentoo.org/glsa/202011-13refpacketstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.htmlrefzerodayinitiative.com/advisories/ZDI-20-1381refzerodayinitiative.com/advisories/ZDI-20-1383refzerodayinitiative.com/advisories/ZDI-20-1380refzerodayinitiative.com/advisories/ZDI-20-1379refzerodayinitiative.com/advisories/ZDI-20-1382reflists.debian.org/debian-lts-announce/2020/12/msg00007.htmladvisorydebian.org/security/2021/dsa-4837reflists.debian.org/debian-lts-announce/2022/01/msg00000.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-16846kevcisa.gov/known-exploited-vulnerabilities-catalog