GitHub Advisoryadvisory · PyPI

GHSA-h8xp-h3jf-wv4v SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function

CRITICAL Published 2022-05-24 Modified 2024-10-25 Official page ↗
Aliases
CVE-2019-1010259
Ecosystem
PyPI
Packages
salt
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
Reviewed
2024-04-22

Affected packages

• PyPI salt: >= 2018.3.0, < 2018.3.4 → fixed in 2018.3.4

Description

SaltStack Salt 2018.3 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The `mysql.user_chpass` function from the MySQL module for Salt (https://github.com/saltstack/salt/blob/develop/salt/modules/mysql.py#L1462). The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.

Related

Alias · CVE (1)

  • CVE-2019-1010259 SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References