EDB-48421
PoCSaltstack 3000.1 - Remote Code Execution
view exploit source exploit_dbtype remoteauthor Jasper Lievisse Adriaansepublished 2020-05-05catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-11652US | medium6.5OT critical | KEV | ||
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize pa… | ||||
| CVE-2020-11651US | critical9.8OT critical | KEV | ||
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a re… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan