CRITICAL CISA KEV

CVE-2020-11651

CVSS v3

9.8

CRITICAL

EPSS Score

94.4%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.

CISA Known Exploited Vulnerability

Date Added
11/3/2021
Patch Due Date
5/3/2022
Ransomware Use
Unknown

Technical details

Published
4/30/2020
Exploit-DB
EDB-48421

Frequently asked questions

What is CVE-2020-11651?

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.

Is CVE-2020-11651 actively exploited?

Yes. CVE-2020-11651 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 5/3/2022.

What is the CVSS score for CVE-2020-11651?

CVE-2020-11651 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2020-11651 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.