CVE

CVE-2020-25592

CVE-2020-25592

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.

Source: CVE-2020-25592

Exit mobile version