exploit/linux/misc/saltstack_salt_unauth_rce
weaponizedSaltStack Salt Master/Minion Unauthenticated RCE
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-11652US | medium6.5OT critical | KEV | ||
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize pa… | ||||
| CVE-2020-11651US | critical9.8OT critical | KEV | ||
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a re… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan