CVE-2020-11652—SaltStack Salt Path Traversal Vulnerability

漏洞名称

SaltStack Salt Path Traversal Vulnerability

描述

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2020-11652

相关 CWE

• CWE-22