CVE-2020-28243

CVE-2020-28243 SaltStackのSaltにおけるコマンドインジェクションの脆弱性により、マスターがrestartcheckを呼び出した際に、ミニオン上で特別に細工されたプロセス名を介して権限昇格が可能になります。詳細はこのブログ記事を参照してください。 影響を受けるバージョン: 2016.3.0rc2 から 3002.2 までのすべてのバージョン リンク: Mitre, NVD 要件 このエクスプロイトを動作させるには、以下が必要です: 2016.3.0rc2 から 3002.5 までの SaltStack Minion SaltStack...

CVE-2020-16846-Saltstack-Salt-API

CVE-2020-16846-Saltstack-Salt-API 脆弱性の説明: SaltStack Salt 3002 以前で問題が発見されました。SSH クライアントが有効な状態で細工された Web リクエストを Salt API に送信すると、シェルインジェクションが発生する可能性があります。この脆弱性の詳細は、以下で確認できます: https://www.zerodayinitiative.com/blog/2020/11/24/detailing-saltstack-salt-command-injection-vulnerabilities...

CVE-2020-11651

CVE-2020-11651 CVE-2020-11651 用 PoC Python3 が必要です 3.8 でテスト済み python3.8 -m pip install pyzmq msgpack ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP or Host optional argument...

CVE-2020-11651

CVE-2020-11651 SaltStack Salt の 2019.2.4 未満および 3000 の 3000.2 未満において問題が発見されました。salt-master プロセスの ClearFuncs クラスはメソッド呼び出しを適切に検証しません。これにより、リモートユーザーが認証なしで一部のメソッドにアクセスできるようになります。これらのメソッドを使用して、salt master からユーザートークンを取得したり、salt minion 上で任意のコマンドを実行したりできます。 詳細 サポートされていない salt バージョン向けのパッチ インストール git clone...

EUVD-2018-0133

Malware in sbrugna...

EUVD-2022-4798

Malicious code in bioql PyPI...

CVE-2019-1010259

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.userchpass function from the MySQL module for Salt. The attack vector is: specially crafted...

PT-2025-25393

Name of the Vulnerable Software and Affected Versions SaltStack Salt affected versions not specified Description The issue concerns a directory traversal attack in minion file cache creation. The master's default cache is vulnerable to this attack, which could be leveraged to write or overwrite...

PT-2025-25391

Name of the Vulnerable Software and Affected Versions SaltStack Salt versions 3007.0 and later Description The issue concerns an authorization bypass in the Minion event bus. An attacker with access to a minion key can craft a message to potentially execute a job on other minions. Recommendations...

SaltStack Salt Master Server Root Key Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SaltStack Salt Master Server Root Key Disclosure', 'Description' = %q This module exploits unauthenticated access to the prepauthinfo method in t...

ROS-20240409-06

A vulnerability in SaltStack Salt's configuration management and remote operations execution system is related to receiving multiple bad packets to the server equal to the number of worker threads, Salt will stop responding back requests before restarting. Exploitation of the vulnerability could...

GLSA-202310-22 : Salt: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-22 Salt: Multiple Vulnerabilities - An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege...

SUSE SLES15 Security Update : salt (SUSE-SU-2022:2278-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2278-1 advisory. - An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allow...

CVE-2022-2282

Removed by vendor...

PT-2022-15695

Name of the Vulnerable Software and Affected Versions saltstack/salt versions prior to 3004.2 Description The issue is related to improper authorization in the saltstack/salt GitHub repository. Recommendations For versions prior to 3004.2, update to version 3004.2 or later to resolve the issue...

SUSE SLES15 Security Update : salt (SUSE-SU-2022:2159-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2159-1 advisory. - An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allow...

Design/Logic Flaw

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an...

PYSEC-2022-210

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an...

SUSE SLES12 Security Update : salt (SUSE-SU-2022:2154-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2154-1 advisory. - An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allow...

CVE-2022-22967

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an...