Log in Start free

Vulnerability · Published Nov 6, 2020 · Assigned by mitre

CVE-2020-25592

Critical 9.8

In plain English

A critical-severity security flaw in the salt package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 56.8% (higher than 99.1% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)56.8%top 0.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Metasploit

Official description

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20salt3002-r1ALPINE-CVE-2020-25592
Alpine:v3.21salt3002-r1ALPINE-CVE-2020-25592
Alpine:v3.22salt3002-r1ALPINE-CVE-2020-25592
Alpine:v3.23salt3002-r1ALPINE-CVE-2020-25592
Alpine:v3.24salt3002-r1ALPINE-CVE-2020-25592
PyPIsalt2015.8.13GHSA-29j3-2446-5j4w
PyPIsalt2016.3.8GHSA-29j3-2446-5j4w
PyPIsalt2016.11.10GHSA-29j3-2446-5j4w
PyPIsalt2017.7.8GHSA-29j3-2446-5j4w
PyPIsalt2018.3.5GHSA-29j3-2446-5j4w
PyPIsalt2019.2.7GHSA-29j3-2446-5j4w
PyPIsalt3000.5GHSA-29j3-2446-5j4w
PyPIsalt3001.3GHSA-29j3-2446-5j4w
PyPIsalt3002.1GHSA-29j3-2446-5j4w
PyPIsalt2015.8.10, 2015.8.13, 2016.11.10, 2016.11.3, 2016.11.6, 2016.3.4, 2016.3.6, 2016.3.8, 2017.7.4, 2017.7.8, 2018.3.5, 2019.2.5, 3000.3PYSEC-2020-106

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References