CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.1 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/
https://saltproject.io/security-announcements/2023-08-10-advisory/	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:saltstack:salt::::::::
	cpe:2.3:a:saltstack:salt::::::::

History

No history.

Information

Published : 2023-09-05 11:15

Updated : 2023-09-14 03:15

NVD link : CVE-2023-20898

Mitre link : CVE-2023-20898

CVE.ORG link : CVE-2023-20898

JSON object : View

Products Affected

saltstack

salt

CWE

NVD-CWE-noinfo

{"id": "CVE-2023-20898", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.1}, {"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 1.1}]}, "published": "2023-09-05T11:15:33.300", "references": [{"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/", "source": "security@vmware.com"}, {"url": "https://saltproject.io/security-announcements/2023-08-10-advisory/", "tags": ["Mitigation", "Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.\n"}, {"lang": "es", "value": "Git Providers pueden leer desde el entorno incorrecto porque obtienen el mismo nombre base de directorio de cach\u00e9 en los Salt Masters anteriores a 3005.2 o 3006.2. Cualquier cosa que use proveedores de Git con diferentes entornos puede obtener datos basura o datos incorrectos, lo que puede conducir a la divulgaci\u00f3n de datos incorrecta, ejecuciones incorrectas, corrupci\u00f3n de datos y / o bloqueo."}], "lastModified": "2023-09-14T03:15:08.180", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B70F6397-8CB9-47B6-A4BF-C7E4A1017F6A", "versionEndExcluding": "3005.2"}, {"criteria": "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A22FBD43-AC7E-45B9-9EC5-340CF735773E", "versionEndExcluding": "3006.2", "versionStartIncluding": "3006.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}