auxiliary/gather/saltstack_salt_root_key

functional

SaltStack Salt Master Server Root Key Disclosure

view exploit source metasploittype auxiliarypublished 2020-04-30catalog metasploit
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-11652USmedium6.5OT criticalKEV
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize pa…
CVE-2020-11651UScritical9.8OT criticalKEV
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a re…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan