NetSight
IP …
high7.8

CVE-2020-28243

SaltStack Salt command injection via a crafted process name

Impact

An issue was discovered in SaltStack Salt before 3002.5. The minion's `restartcheck` is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.

Affected packages

EcosystemPackageAffectedFixed in
pipsalt< 2015.8.132015.8.13

Affected products

VendorProductAffected versions
SaltstackSalt
before 2015.8.10
from 2015.8.11 before 2015.8.13
from 2016.3.0 before 2016.3.4
from 2016.3.5 before 2016.3.6
from 2016.3.7 before 2016.3.8
from 2016.3.9 before 2016.11.3
FedoraprojectFedora
Versions 32, 33, 34
DebianDebian Linux
Versions 9.0, 10.0, 11.0

Weakness classification

CWE-77CWE-78

References