PT-2020-3642 · Saltstack+3 · Saltstack Salt+3
Published
2019-07-29
·
Updated
2023-01-31
·
CVE-2019-17361
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SaltStack Salt versions prior to 2019.2.3
SaltStack Salt versions prior to 2019.2.0
Description
The issue allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host. This is due to a lack of measures to neutralize special elements, which can be exploited by a remote attacker to gain access to confidential data, compromise its integrity, and cause a denial of service. The salt-api NET API with the ssh client enabled is vulnerable to command injection.
Recommendations
For SaltStack Salt versions prior to 2019.2.0, update to version 2019.2.0 or later to resolve the issue.
For SaltStack Salt versions prior to 2019.2.3, update to version 2019.2.3 or later to resolve the issue.
As a temporary workaround, consider disabling the ssh client in the salt-api NET API to minimize the risk of exploitation.
Fix
Special Elements Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Saltstack Salt
Suse
Ubuntu