H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2020-11652

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

Labels

exploitedkev

CISA KEV context

Vendor / productSaltStack Salt
Added2021-11-03
Due date2022-05-03
6 recorded

Relationships

mitigates
from Remediate CVE-2020-11652
Mitigation
related-to
to Manipulating Web Input to File System Calls
Technique
related-to
to Path Traversal
Technique
related-to
to Using Escaped Slashes in Alternate Encoding
Technique
related-to
to Using Slashes and URL Encoding Combined to Bypass Validation Logic
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
2 external

References

nvd
CVE-2020-11652
open
cwe
CWE-22
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance