CVE-2020-11651 is a critical vulnerability in SaltStack Salt before versions 2019.2.4 and 3000.2, affecting products from Canonical, Debian, OpenSUSE, SaltStack, and VMware. This flaw allows unauthenticated remote attackers to bypass authentication in the salt-master process, enabling them to retrieve user tokens or execute arbitrary commands on Salt minions. With a CVSS score of 9.8 (Critical) and an EPSS score indicating high exploitability, this vulnerability poses a significant risk due to its network-based attack vector, low attack complexity, and complete compromise potential (confidentiality, integrity, availability). It is actively exploited in the wild, with public exploit code available in Metasploit and ExploitDB, and has garnered extensive community discussion and media coverage, including reports of its use in high-profile breaches.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2019.2.4CPE matchmatch criteria | cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:* | ||
>= 3000, < 3000.2CPE matchmatch criteria | cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:* | ||
15.1CPE matchmatch criteria | cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.