admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-06 10:41:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/SaltStack/CVE-2020-16846
History
tardc 7735122829 add CVE-2020-16846
2020-11-20 10:32:03 +08:00
..
CVE-2020-16846.gif
add CVE-2020-16846
2020-11-20 10:32:03 +08:00
README.md
add CVE-2020-16846
2020-11-20 10:32:03 +08:00

README.md

CVE-2020-16846 SaltStack RCE Vulnerability

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.

Affected version: SaltStack Salt < 3002

FOFA query rule: header="application/json" && header="CherryPy" && body="clients"

Demo