CVE-2020-16846—SaltStack Salt Shell Injection Vulnerability

漏洞名称

SaltStack Salt Shell Injection Vulnerability

描述

SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2020-16846

相关 CWE

• CWE-78