CVE-2020-25592

Published: Nov 6, 2020Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.

Affected (16)

Products: Saltstack: Salt · Debian: Debian Linux

1 product

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Saltstack Salt	Before 2015.8.10
Saltstack Salt	From 2015.8.11 to 2015.8.13
Saltstack Salt	From 2016.11.0 to 2016.11.3
Saltstack Salt	From 2016.11.4 to 2016.11.6
Saltstack Salt	From 2016.11.7 to 2016.11.10
Saltstack Salt	From 2016.3.0 to 2016.3.4
Saltstack Salt	From 2016.3.5 to 2016.3.6
Saltstack Salt	From 2016.3.7 to 2016.3.8
Saltstack Salt	From 2017.5.0 to 2017.7.4
Saltstack Salt	From 2017.7.5 to 2017.7.8
Saltstack Salt	From 2018.2.0 to 2018.3.5
Saltstack Salt	From 2019.2.0 to 2019.2.5
Saltstack Salt	From 3000.0 to 3000.3
Saltstack Salt	Version 3001

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (16)

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html

Source: cve@mitre.org

Third Party Advisory

http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://docs.saltstack.com/en/latest/topics/releases/index.html

Source: cve@mitre.org

Release NotesVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/

Source: cve@mitre.org

https://security.gentoo.org/glsa/202011-13

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2021/dsa-4837

Source: cve@mitre.org

Third Party Advisory

https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://docs.saltstack.com/en/latest/topics/releases/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202011-13

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2021/dsa-4837

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.