CVE-2020-11651 log
| Source |
|
| Severity | Critical |
| Remote | Yes |
| Type | Arbitrary command execution |
| Description | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1147 | salt | 2019.2.3-1 | 2019.2.4-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 05 May 2020 | ASA-202005-1 | AVG-1147 | salt | Critical | multiple issues |