cve/2020/CVE-2020-11651.md

CVE-2020-11651

Description

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.

POC

Reference

• http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/157560/Saltstack-3000.1-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/157678/SaltStack-Salt-Master-Minion-Unauthenticated-Remote-Code-Execution.html

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/0xT11/CVE-POC
• https://github.com/0xc0d/CVE-2020-11651
• https://github.com/20142995/Goby
• https://github.com/20142995/pocsuite3
• https://github.com/20142995/sectool
• https://github.com/5l1v3r1/SaltStack-Exp-1
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Al1ex/CVE-2020-11652
• https://github.com/ArrestX/--POC
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/CnHack3r/Penetration_PoC
• https://github.com/EchoGin404/-
• https://github.com/EchoGin404/gongkaishouji
• https://github.com/FDlucifer/firece-fish
• https://github.com/GhostTroops/TOP
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Imanfeng/SaltStack-Exp
• https://github.com/JERRY123S/all-poc
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/MelanyRoob/Goby
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/RakhithJK/CVE-2020-11651
• https://github.com/SexyBeast233/SecBooks
• https://github.com/TesterCC/exp_poc_library
• https://github.com/Threekiii/Awesome-Exploit
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/Tyro-Shan/gongkaishouji
• https://github.com/YIXINSHUWU/Penetration_Testing_POC
• https://github.com/Z0fhack/Goby_POC
• https://github.com/ZTK-009/Penetration_PoC
• https://github.com/apachecn-archive/Middleware-Vulnerability-detection
• https://github.com/appcheck-ng/salt-rce-scanner-CVE-2020-11651-CVE-2020-11652
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/bravery9/SaltStack-Exp
• https://github.com/chef-cft/salt-vulnerabilities
• https://github.com/cyberanand1337x/bug-bounty-2022
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/dozernz/cve-2020-11651
• https://github.com/dwoz/salt-rekey
• https://github.com/fanjq99/CVE-2020-11652
• https://github.com/ffffffff0x/Dork-Admin
• https://github.com/fofapro/vulfocus
• https://github.com/gobysec/Goby
• https://github.com/hardsoftsecurity/CVE-2020-11651-PoC
• https://github.com/hasee2018/Penetration_Testing_POC
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/heikanet/CVE-2020-11651-CVE-2020-11652-EXP
• https://github.com/hktalent/TOP
• https://github.com/hktalent/bug-bounty
• https://github.com/huike007/penetration_poc
• https://github.com/huike007/poc
• https://github.com/jasperla/CVE-2020-11651-poc
• https://github.com/jbmihoub/all-poc
• https://github.com/kasini3000/kasini3000
• https://github.com/kevthehermit/CVE-2020-11651
• https://github.com/limon768/CVE-2020-11652-CVE-2020-11652-POC
• https://github.com/limon768/CVE-2020-11652-POC
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/lovechinacoco/https-github.com-mai-lang-chai-Middleware-Vulnerability-detection
• https://github.com/lovelyjuice/cve-2020-11651-exp-plus
• https://github.com/merlinxcy/ToolBox
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/password520/Penetration_PoC
• https://github.com/puckiestyle/cve-2020-11651
• https://github.com/rapyuta-robotics/clean-script
• https://github.com/retr0-13/Goby
• https://github.com/rossengeorgiev/salt-security-backports
• https://github.com/soosmile/POC
• https://github.com/ssrsec/CVE-2020-11651-CVE-2020-11652-EXP
• https://github.com/tdtc7/qps
• https://github.com/trganda/dockerv
• https://github.com/trganda/starrlist
• https://github.com/weeka10/-hktalent-TOP
• https://github.com/whoadmin/pocs
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/yedada-wei/-
• https://github.com/yedada-wei/gongkaishouji
• https://github.com/zhangchi991022/Comprehensive-experiment-of-infomation-security