Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2020-16846: Salt Stack Salt Shell Injection Vulnerability

SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2020-16846SaltStack

Related

CVE-2020-11651: Salt Stack Salt Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021

CVE-2020-11652: Salt Stack Salt Path Traversal Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026