Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-25592
9.8
CRITICALCVSS v3
Published
November 6, 2020
CVSS v2
7.5 HIGH
Affected
8 projects
Assigned by
MITRE
Severity scale
010
Description
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
saltstack/salt
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.= 3001, >= 2019.2.0, < 2019.2.5, >= 3000.0, < 3000.3, >= 2018.2.0, < 2018.3.5, >= 2016.3.7, < 2016.3.8, >= 2017.7.5, < 2017.7.8, >= 2017.5.0, < 2017.7.4, >= 2016.11.7, < 2016.11.10, >= 2016.11.4, < 2016.11.6, < 2015.8.10, >= 2015.8.11, < 2015.8.13, >= 2016.3.0, < 2016.3.4, >= 2016.3.5, < 2016.3.6, >= 2016.11.0, < 2016.11.3NVD
twangboy/saltGitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here:
GitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here: = 3001, >= 2019.2.0, < 2019.2.5, >= 3000.0, < 3000.3, >= 2018.2.0, < 2018.3.5, >= 2016.3.7, < 2016.3.8, >= 2017.7.5, < 2017.7.8, >= 2017.5.0, < 2017.7.4, >= 2016.11.7, < 2016.11.10, >= 2016.11.4, < 2016.11.6, < 2015.8.10, >= 2015.8.11, < 2015.8.13, >= 2016.3.0, < 2016.3.4, >= 2016.3.5, < 2016.3.6, >= 2016.11.0, < 2016.11.3
Crates.io
RubyGems
NPM