Lucene search
K

5 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/11/24 12:0 a.m.39 views

SaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SaltStack Salt. Authentication is not required to exploit this vulnerability. The specific flaw exists within the restcherrypy module. When parsing the sshremoteportforwards parameter, the process do...

7.3CVSS5.1AI score0.94387EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2020/11/24 12:0 a.m.100 views

SaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SaltStack Salt. Authentication is not required to exploit this vulnerability. The specific flaw exists within the restcherrypy module. When parsing the sshpriv parameter, the process does not properl...

7.3CVSS5.1AI score0.94387EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2020/11/24 12:0 a.m.33 views

SaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SaltStack Salt. Authentication is not required to exploit this vulnerability. The specific flaw exists within the restcherrypy module. When parsing the tgt parameter, the process does not properly...

7.3CVSS4.7AI score0.94387EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2020/11/24 12:0 a.m.40 views

SaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SaltStack Salt. Authentication is not required to exploit this vulnerability. The specific flaw exists within the restcherrypy module. When parsing the sshport parameter, the process does not properl...

7.3CVSS5.1AI score0.94387EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2020/11/24 12:0 a.m.37 views

SaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SaltStack Salt. Authentication is not required to exploit this vulnerability. The specific flaw exists within the restcherrypy module. When parsing the sshoptions parameter, the process does not...

7.3CVSS5.1AI score0.94387EPSS
Exploits5References1
Rows per page
Query Builder