Lucene search
+L

SaltStack Salt Authentication Bypass Vulnerability

🗓️ 03 Nov 2021 00:00:00Reported by CISAType 
cisa_kev
 cisa_kev
🔗 www.cisa.gov👁 20 Views

SaltStack Salt authentication bypass vulnerability in ClearFuncs process allows remote user to access methods without authentication, potentially leading to token retrieval and command execution on salt minions

Related
ReporterTitlePublishedViews
Family
zdt
zdt
Saltstack 3000.1 - Remote Code Execution Exploit
4 May 202000:00
zdt
zdt
zdt
Saltstack 3000.1 Remote Code Execution Exploit
7 May 202000:00
zdt
zdt
zdt
SaltStack Salt Master/Minion Unauthenticated Remote Code Execution Exploit
12 May 202000:00
zdt
githubexploit
GithubExploit
Exploit for CVE-2020-11651
4 May 202011:52
githubexploit
githubexploit
GithubExploit
Exploit for CVE-2020-11651
7 May 202009:17
githubexploit
githubexploit
GithubExploit
Exploit for CVE-2020-11651
4 May 202011:47
githubexploit
githubexploit
GithubExploit
Exploit for CVE-2020-11651
4 May 202020:34
githubexploit
githubexploit
GithubExploit
Exploit for CVE-2020-11651
7 May 202009:17
githubexploit
githubexploit
GithubExploit
Exploit for Path Traversal in Saltstack Salt
17 Jan 202404:15
githubexploit
githubexploit
GithubExploit
Exploit for CVE-2020-11651
7 May 202004:41
githubexploit
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Nov 2021 00:00Current
9.1High risk
Vulners AI Score9.1
CVSS 27.5
CVSS 3.19.8
EPSS0.96614
SSVC
20