CVE-2020-25592
06.11.2020, 08:15
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.Enginsight
| Vendor | Product | Version |
|---|---|---|
| saltstack | salt | 𝑥 < 2015.8.10 |
| saltstack | salt | 2015.8.11 ≤ 𝑥 < 2015.8.13 |
| saltstack | salt | 2016.3.0 ≤ 𝑥 < 2016.3.4 |
| saltstack | salt | 2016.3.5 ≤ 𝑥 < 2016.3.6 |
| saltstack | salt | 2016.3.7 ≤ 𝑥 < 2016.3.8 |
| saltstack | salt | 2016.11.0 ≤ 𝑥 < 2016.11.3 |
| saltstack | salt | 2016.11.4 ≤ 𝑥 < 2016.11.6 |
| saltstack | salt | 2016.11.7 ≤ 𝑥 < 2016.11.10 |
| saltstack | salt | 2017.5.0 ≤ 𝑥 < 2017.7.4 |
| saltstack | salt | 2017.7.5 ≤ 𝑥 < 2017.7.8 |
| saltstack | salt | 2018.2.0 ≤ 𝑥 < 2018.3.5 |
| saltstack | salt | 2019.2.0 ≤ 𝑥 < 2019.2.5 |
| saltstack | salt | 3000.0 ≤ 𝑥 < 3000.3 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration