PT-2020-22672 · Saltstack · Saltstack Salt

Published 2020-01-17 · Updated 2020-01-17

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions SaltStack Salt versions prior to 2019.2.0

Description The issue allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the host. This is due to a command injection vulnerability in the salt-api NET API when the ssh client is enabled.

Recommendations For versions prior to 2019.2.0, update to version 2019.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the ssh client in the salt-api NET API to minimize the risk of exploitation.

Related Identifiers

PYSEC-2020-196

Affected Products

Saltstack Salt

References · 6

• https://debian.org/security/2020/dsa-4676 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-196 · Vendor Advisory
• https://github.com/saltstack/salt/commits/master · Note
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html · Note
• https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix · Note
• https://usn.ubuntu.com/4459-1 · Note