CVE-2020-11652
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.
CISA Known Exploited Vulnerability
Vendor / Product
SaltStack — Salt
Date Added
2021-11-03
Remediation Due
2022-05-03
https://nvd.nist.gov/vuln/detail/CVE-2020-11652