USN-4459-1 (UBUNTU-CVE-2018-15750)

Vulnerability from osv_ubuntu – Published: 2020-08-13 21:23 – Updated: 2026-04-27 14:11 – Source website
VLAI
Summary
salt vulnerabilities
Details

It was discovered that Salt allows remote attackers to determine which files exist on the server. An attacker could use that to extract sensitive information. (CVE-2018-15750)

It was discovered that Salt has a vulnerability that allows an user to bypass authentication. An attacker could use that to extract sensitive information, execute abritrary code or crash the server. (CVE-2018-15751)

It was discovered that Salt is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host. (CVE-2019-17361)

It was discovered that Salt incorrectly validated method calls and sanitized paths. A remote attacker could possibly use this issue to access some methods without authentication. (CVE-2020-11651, CVE-2020-11652)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2019-17361",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-11651",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-11652",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "salt-api",
            "binary_version": "2015.8.8+ds-1ubuntu0.1"
          },
          {
            "binary_name": "salt-cloud",
            "binary_version": "2015.8.8+ds-1ubuntu0.1"
          },
          {
            "binary_name": "salt-common",
            "binary_version": "2015.8.8+ds-1ubuntu0.1"
          },
          {
            "binary_name": "salt-master",
            "binary_version": "2015.8.8+ds-1ubuntu0.1"
          },
          {
            "binary_name": "salt-minion",
            "binary_version": "2015.8.8+ds-1ubuntu0.1"
          },
          {
            "binary_name": "salt-proxy",
            "binary_version": "2015.8.8+ds-1ubuntu0.1"
          },
          {
            "binary_name": "salt-ssh",
            "binary_version": "2015.8.8+ds-1ubuntu0.1"
          },
          {
            "binary_name": "salt-syndic",
            "binary_version": "2015.8.8+ds-1ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "salt",
        "purl": "pkg:deb/ubuntu/salt@2015.8.8+ds-1ubuntu0.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2015.8.8+ds-1ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2015.5.3+ds-1",
        "2015.8.1+ds-2",
        "2015.8.3+ds-1",
        "2015.8.3+ds-2",
        "2015.8.3+ds-3",
        "2015.8.5+ds-1",
        "2015.8.7+ds-1",
        "2015.8.8+ds-1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-15750",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-15751",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-17361",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-11651",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-11652",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "salt-api",
            "binary_version": "2017.7.4+dfsg1-1ubuntu18.04.2"
          },
          {
            "binary_name": "salt-cloud",
            "binary_version": "2017.7.4+dfsg1-1ubuntu18.04.2"
          },
          {
            "binary_name": "salt-common",
            "binary_version": "2017.7.4+dfsg1-1ubuntu18.04.2"
          },
          {
            "binary_name": "salt-master",
            "binary_version": "2017.7.4+dfsg1-1ubuntu18.04.2"
          },
          {
            "binary_name": "salt-minion",
            "binary_version": "2017.7.4+dfsg1-1ubuntu18.04.2"
          },
          {
            "binary_name": "salt-proxy",
            "binary_version": "2017.7.4+dfsg1-1ubuntu18.04.2"
          },
          {
            "binary_name": "salt-ssh",
            "binary_version": "2017.7.4+dfsg1-1ubuntu18.04.2"
          },
          {
            "binary_name": "salt-syndic",
            "binary_version": "2017.7.4+dfsg1-1ubuntu18.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "salt",
        "purl": "pkg:deb/ubuntu/salt@2017.7.4+dfsg1-1ubuntu18.04.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2017.7.4+dfsg1-1ubuntu18.04.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2016.11.5+ds-1",
        "2016.11.8+dfsg1-1",
        "2017.7.2+dfsg1-2ubuntu1",
        "2017.7.3+dfsg1-1",
        "2017.7.4+dfsg1-1",
        "2017.7.4+dfsg1-1ubuntu18.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that Salt allows remote attackers to determine which files\nexist on the server. An attacker could use that to extract sensitive\ninformation. (CVE-2018-15750)\n\nIt was discovered that Salt has a vulnerability that allows an user to bypass\nauthentication. An attacker could use that to extract sensitive information,\nexecute abritrary code or crash the server. (CVE-2018-15751)\n\nIt was discovered that Salt is vulnerable to command injection. This allows\nan unauthenticated attacker with network access to the API endpoint to\nexecute arbitrary code on the salt-api host. (CVE-2019-17361)\n\nIt was discovered that Salt incorrectly validated method calls and\nsanitized paths. A remote attacker could possibly use this issue to access\nsome methods without authentication. (CVE-2020-11651, CVE-2020-11652)\n",
  "id": "USN-4459-1",
  "modified": "2026-04-27T14:11:25Z",
  "published": "2020-08-13T21:23:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4459-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-15750"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-15751"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-17361"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-11651"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-11652"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "salt vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-15750",
    "UBUNTU-CVE-2018-15751",
    "UBUNTU-CVE-2019-17361",
    "UBUNTU-CVE-2020-11651",
    "UBUNTU-CVE-2020-11652"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.