PT-2019-20137 · Oracle+1 · Mysql Server+1

Publicado 2019-07-18 · Atualizado 2019-07-18

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions SaltStack Salt versions 2018.3 through 2018.3.3 SaltStack Salt version 2019.2

Description The issue allows an attacker to escalate privileges on a MySQL server deployed by a cloud provider, leading to remote code execution (RCE). This is achieved through a specially crafted password string, exploiting the mysql.user chpass function from the MySQL module for Salt.

Recommendations For SaltStack Salt versions 2018.3 through 2018.3.3, update to version 2018.3.4 to resolve the issue. For SaltStack Salt version 2019.2, update to a version that includes the fix, as the specific fixed version for 2019.2 is not provided.

Identificadores relacionados

PYSEC-2019-49

Produtos afetados

Mysql Server

Saltstack Salt

Referências · 4

• https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534 · Nota
• https://github.com/saltstack/salt/pull/51462 · Nota
• ❌ https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a · Nota, Deleted
• https://osv.dev/vulnerability/PYSEC-2019-49 · Aviso do Fabricante