PT-2020-5859 · Saltstack+3 · Saltstack Salt+3
CVE-2020-16846
·
Published
2016-11-21
·
Updated
2025-07-30
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
SaltStack Salt versions through 3002
Description:
The issue is related to a lack of measures to neutralize special elements in the Salt configuration management and remote execution system. Exploitation of this issue allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability can be exploited by sending crafted web requests to the Salt API, with the SSH client enabled, resulting in shell injection.
Recommendations:
For versions through 3002, update to a version that contains a fix for this issue to prevent shell injection and command injection vulnerabilities.
As a temporary workaround, consider disabling the SSH client in the Salt API until a patch is available.
Restrict access to the Salt API to minimize the risk of exploitation.
Exploit
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Saltstack Salt
Suse
Ubuntu