CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-11-06
SaltStack Salt API SSH Client Shell Injection Remote Code Execution Vulnerability (CVE-2020-16846)
[Affected Scope] SaltStack Salt versions up to and including 3002 with Salt API and SSH client enabled
[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the target server by sending crafted HTTP requests
[Mitigation] Apply the official SaltStack security patches immediately, or disable the SSH client integration in the Salt API configuration