Beveiligingsadvies

CVE-2020-11652

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-04-30 17:00:03
Laatst bijgewerkt 2025-10-21 23:35:44
Toegewezen door mitre
CVSS-score 6.5
Status PUBLISHED

Beschrijving

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.