cve.bz

CVE-2020-25592

9.8 criticalEPSS 57%

Critical (9.8). EPSS 57% chance of exploitation in the next 30 days. Fixed in salt 2015.8.10, 2015.8.13, 2016.11.10.

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
57% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE
CWE-287
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-29j3-2446-5j4wPyPIsalt<2015.8.132015.8.13
GHSA-29j3-2446-5j4wPyPIsalt>=2016.3.0 <2016.3.82016.3.8
GHSA-29j3-2446-5j4wPyPIsalt>=2016.11.0 <2016.11.102016.11.10
GHSA-29j3-2446-5j4wPyPIsalt>=2017.5.0 <2017.7.82017.7.8
GHSA-29j3-2446-5j4wPyPIsalt>=2018.2.0 <2018.3.52018.3.5
GHSA-29j3-2446-5j4wPyPIsalt>=2019.2.0 <2019.2.72019.2.7
GHSA-29j3-2446-5j4wPyPIsalt>=3000.0 <3000.53000.5
GHSA-29j3-2446-5j4wPyPIsalt>=3001.0 <3001.33001.3
GHSA-29j3-2446-5j4wPyPIsalt>=3002.0 <3002.13002.1
PYSEC-2020-106PyPIsalt<2015.8.10
>=2015.8.11 <2015.8.13
>=2016.3.0 <2016.3.4
>=2016.3.5 <2016.3.6
>=2016.3.7 <2016.3.8
>=2016.11.0 <2016.11.3
>=2016.11.4 <2016.11.6
>=2016.11.7 <2016.11.10
>=2017.7.0 <2017.7.4
>=2017.7.5 <2017.7.8
>=2018.3.0rc1 <2018.3.5
>=2019.2.0 <2019.2.5
>=3000 <3000.3		2015.8.10, 2015.8.13, 2016.3.4, 2016.3.6, 2016.3.8, 2016.11.3, 2016.11.6, 2016.11.10, 2017.7.4, 2017.7.8, 2018.3.5, 2019.2.5, 3000.3

References

Check your stackJSON