CVE Watch—

CVE-2020-11652

SaltStack Salt Path Traversal Vulnerability

CVSS

—

Sem CVSS

EPSS

86.2%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

86.2%EPSS · 30 dias86.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

SaltStack / Salt

Vulnerabilidade

SaltStack Salt Path Traversal Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

3 de mai. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-11652

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2020-16846—

99.9%

KEV—80SaltStack Salt Shell Injection Vulnerability—CVE-2020-11651—

99.9%

KEV—80SaltStack Salt Authentication Bypass Vulnerability—