CVE-2020-11652: saltstack salt +5 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-11652

CVSS 6.5 · Medium KEV · sudah dieksploitasi EPSS 86,2%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada saltstack salt, opensuse leap +4 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD. Masuk katalog KEV CISA pada 3 November 2021, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

Rincian

Terbit di NVD: 30 April 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari): 86,2% peluang dieksploitasi; lebih tinggi dari 99,7% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: SaltStack Salt Path Traversal Vulnerability
Masuk KEV: 3 November 2021
Tenggat CISA: 3 Mei 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply updates per vendor instructions.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
saltstack	salt	Semua versi sebelum 2019.2.4
saltstack	salt	Versi 3000 hingga sebelum 3000.2
opensuse	leap	Versi 15.1
debian	debian linux	Versi 8.0
debian	debian linux	Versi 9.0
debian	debian linux	Versi 10.0
canonical	ubuntu linux	Versi 16.04
canonical	ubuntu linux	Versi 18.04
blackberry	workspaces server	Semua versi hingga 7.1.3
blackberry	workspaces server	Versi 8.0.0 hingga 8.2.6
blackberry	workspaces server	Versi 9.1.0
vmware	application remote collector	Versi 7.5.0
vmware	application remote collector	Versi 8.0.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://docs.saltstack.com/en/latest/topics/releases/2019.2.4.html advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11652 pemerintah AS
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00047.html mailing list · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html mailing list · advisory pihak ketiga
http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html advisory pihak ketiga · vdb entry
http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution... exploit · advisory pihak ketiga · vdb entry
http://support.blackberry.com/kb/articleDetail?articleNumber=000063758 advisory pihak ketiga
http://www.vmware.com/security/advisories/VMSA-2020-0009.html advisory pihak ketiga
https://github.com/saltstack/salt/blob/v3000.2_docs/doc/topics/releases/3000.2.rst advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html mailing list · advisory pihak ketiga
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-salt-2vx545AG advisory pihak ketiga
https://usn.ubuntu.com/4459-1/ advisory pihak ketiga
https://www.debian.org/security/2020/dsa-4676 advisory pihak ketiga

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.