FortiClient VulnerabilitySaltStack Salt CVE-2020-25592 Authentication Bypass Vulnerability
Description
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
Affected Applications
Salt
CVE References
CVE-2020-25592Other References
https://saltproject.io/security_announcements/| ID | 70392 |
| Created | Jan 21, 2022 |
| Description Updated |
Dec 18, 2023 |
| Risk |
|
| Coverage | FortiClient |
| OS | Windows |
| Vendor | SaltStack |
| Patch | manual |
| Application | Salt |