CVE-2020-17490 SaltStack Salt Allows creating certificates with weak file permissions
Weak file permissions on TLS certificates allow attackers to read sensitive keys, compromising secure communications in SaltStack deployments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-17490?
CVE-2020-17490 is a medium-severity vulnerability in Debian Debian Linux, published on 6 Nov 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.
Weakness: CWE-732
Which versions are affected by CVE-2020-17490?
19 open source packages ship an affected version, including salt. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
salt PyPI | All versions | 2015.8.10, 2015.8.13, 2016.3.4, 2016.3.6, 2016.3.8, 2016.11.3, 2016.11.6, 2016.11.10, 2017.7.4, 2017.7.8, 2018.3.5, 2019.2.5, 3000.3 |
salt PyPI | All versions | 2015.8.13 |
salt PyPI | All versions | 2015.8.13 |
salt PyPI | From 2016.11.0 | 2016.11.10 |
salt PyPI | From 2016.11.0 | 2016.11.10 |
salt PyPI | From 2016.3.0 | 2016.3.8 |
13 more packages
salt PyPI | From 2016.3.0 | 2016.3.8 |
salt PyPI | From 2017.5.0 | 2017.7.8 |
salt PyPI | From 2017.5.0 | 2017.7.8 |
salt PyPI | From 2018.2.0 | 2018.3.5 |
salt PyPI | From 2018.2.0 | 2018.3.5 |
salt PyPI | From 2019.2.0 | 2019.2.6 |
salt PyPI | From 2019.2.0 | 2019.2.6 |
salt PyPI | From 3000 | 3000.4 |
salt PyPI | From 3000 | 3000.4 |
salt PyPI | From 3001 | 3001.2 |
salt PyPI | From 3001 | 3001.2 |
salt PyPI | From 3002 | 3002.1 |
salt PyPI | From 3002 | 3002.1 |
Products include Debian Debian Linux, Saltstack Salt.
How do I fix CVE-2020-17490?
Upgrade salt to a fixed version for your release line: 2015.8.10, 2015.8.13, 2016.3.4 or 2016.3.6.
Is CVE-2020-17490 being exploited?
There is no known exploitation of CVE-2020-17490 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as GHSA-3c56-vx6v-q5vh, PYSEC-2020-105, UBUNTU-CVE-2020-17490.