Exploit for OS Command Injection in Saltstack Salt

🗓️ 14 Oct 2021 10:09:48Reported by zomy22Type

Vulnerability in SaltStack Salt API allows OS Command Injection. Exploit creates vulnerable instance for practice and learning.

Reporter	Title	Published	Views	Family All 118
0day.today	SaltStack Salt REST API Arbitrary Command Execution Exploit	12 Nov 202000:00	–	zdt
FreeBSD	salt -- multiple vulnerabilities	6 Nov 202000:00	–	freebsd
ATTACKERKB	CVE-2020-16846 — SaltStack Unauthenticated Shell Injection	6 Nov 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-25592 — SaltStack Authentication Bypass and Salt SSH Command Execution	6 Nov 202000:00	–	attackerkb
AlpineLinux	CVE-2020-16846	6 Nov 202007:27	–	alpinelinux
ArchLinux	[ASA-202011-7] salt: multiple issues	10 Nov 202000:00	–	archlinux
BDU FSTEC	The vulnerability of the configuration management system and remote execution of operations, related to the lack of measures to neutralize special elements, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.	6 Apr 202100:00	–	bdu_fstec
Circl	CVE-2020-16846	11 Nov 202019:52	–	circl
CISA KEV Catalog	SaltStack Salt Shell Injection Vulnerability	3 Nov 202100:00	–	cisa_kev
CNVD	SaltStack API Authorization Issues Vulnerability	9 Nov 202000:00	–	cnvd