CVE Watch—

CVE-2020-11652

SaltStack Salt Path Traversal Vulnerability

CVSS

—

Sin CVSS

EPSS

86.1%

p100

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

86.1%EPSS · 30 días86.1%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

SaltStack / Salt

Vulnerabilidad

SaltStack Salt Path Traversal Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

3 may 2022

Uso conocido en ransomware

Descripción resumida

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-11652

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2020-16846—

99.9%

KEV—80SaltStack Salt Shell Injection Vulnerability—CVE-2020-11651—

99.9%

KEV—80SaltStack Salt Authentication Bypass Vulnerability—