CVE-2020-28243

CVE-2020-28243 SaltStack的Salt中存在一个命令注入漏洞，当master调用restartcheck时，minion上经过特殊构造的进程名称可实现权限提升。完整分析请参见这篇博客文章 受影响版本： 2016.3.0rc2 至 3002.2 之间的所有版本 链接： Mitre, NVD 需求 要使此漏洞利用生效，需要满足以下条件： 版本在 2016.3.0rc2 至 3002.5 之间的 SaltStack Minion 对 SaltStack 未明确忽略的目录具有写/执行权限 Master 需要在此 minion 上调用...

SUSE CVE-2020-28243

An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory...

OS Command Injection

salt is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via a malicious process name through the restartcheck function...

PYSEC-2021-73

An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory...

UBUNTU-CVE-2020-28243

An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory...

Command injection

An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory...

PYSEC-2021-73

An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory...

Exploit for Command Injection in Saltstack Salt

CVE-2020-28243 A command injection vulnerability in SaltStack...

PT-2021-5492 · Saltstack +3 · Saltstack Salt +3

Name of the Vulnerable Software and Affected Versions: SaltStack Salt versions prior to 3002.5 Description: An issue was discovered in SaltStack Salt where the minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any...