CVE-2020-16846
06.11.2020, 08:15
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
| Vendor | Product | Version |
|---|---|---|
| saltstack | salt | 𝑥 < 2015.8.10 |
| saltstack | salt | 2015.8.11 ≤ 𝑥 < 2015.8.13 |
| saltstack | salt | 2016.3.0 ≤ 𝑥 < 2016.3.4 |
| saltstack | salt | 2016.3.5 ≤ 𝑥 < 2016.3.6 |
| saltstack | salt | 2016.3.7 ≤ 𝑥 < 2016.3.8 |
| saltstack | salt | 2016.11.0 ≤ 𝑥 < 2016.11.3 |
| saltstack | salt | 2016.11.4 ≤ 𝑥 < 2016.11.6 |
| saltstack | salt | 2016.11.7 ≤ 𝑥 < 2016.11.10 |
| saltstack | salt | 2017.5.0 ≤ 𝑥 < 2017.7.4 |
| saltstack | salt | 2017.7.5 ≤ 𝑥 < 2017.7.8 |
| saltstack | salt | 2018.2.0 ≤ 𝑥 < 2018.3.5 |
| saltstack | salt | 2019.2.0 ≤ 𝑥 < 2019.2.5 |
| saltstack | salt | 3000.0 ≤ 𝑥 < 3000.3 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| opensuse | leap | 15.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases