Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2020-11652: Salt Stack Salt Path Traversal Vulnerability

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2020-11652SaltStack

Related

CVE-2020-16846: Salt Stack Salt Shell Injection Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021

CVE-2020-11651: Salt Stack Salt Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026