Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-28243
7.8
HIGHCVSS v3
Published
February 27, 2021
CVSS v2
4.4 MEDIUM
Affected
13 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.
saltstack/salt
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.>= 2019.2.0, < 2019.2.5, >= 2016.3.7, < 2016.3.8, >= 2016.11.7, < 2016.11.10, >= 2016.3.5, < 2016.3.6, >= 2015.8.11, < 2015.8.13, >= 2016.3.0, < 2016.3.4, < 2015.8.10, >= 2016.3.9, < 2016.11.3, >= 2016.11.4, < 2016.11.5, >= 2017.5.0, < 2017.7.8, >= 2018.2.0, <= 2018.3.5, >= 2019.2.6, < 2019.2.8, >= 3000, < 3000.6, >= 3001, < 3001.4, >= 3002, < 3002.5NVD
twangboy/saltGitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here:
GitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here: >= 2019.2.0, < 2019.2.5, >= 2016.3.7, < 2016.3.8, >= 2016.11.7, < 2016.11.10, >= 2016.3.5, < 2016.3.6, >= 2015.8.11, < 2015.8.13, >= 2016.3.0, < 2016.3.4, < 2015.8.10, >= 2016.3.9, < 2016.11.3, >= 2016.11.4, < 2016.11.5, >= 2017.5.0, < 2017.7.8, >= 2018.2.0, <= 2018.3.5, >= 2019.2.6, < 2019.2.8, >= 3000, < 3000.6, >= 3001, < 3001.4, >= 3002, < 3002.5
Crates.io
RubyGems
NPM
Docker Hub