SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  SaltStack Salt ClearFuncs Directory Traversal 2

Category: MISC      

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11652


Relevant Information