[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsJAcHQgX0_NMKtTKlhcixnc-fZ307tguOoEw84C_MWU":3,"g5a-risk:CVE-2020-25592":218},{"success":4,"data":5,"meta":216},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":58,"references":59,"referencesCount":95,"weaknesses":96,"weaknessesCount":105,"isActivelyExploited":106,"cisaInfo":26,"otxData":26,"relatedBlogPosts":107,"seoMetadata":108,"configurations":133,"relatedVendorCves":200,"notableEvents":201},"CVE-2020-25592","What is CVE-2020-25592?","In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.","2020-11-06T08:15:13.503","2023-11-07T03:20:16.213",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[30],{"Source":16,"Type":17,"CVSSData":31,"BaseSeverity":24,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.56817,[38,38,38,38,38,38,38],"Critical",[42,47,50,55],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"saltstack","salt","*","cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"3001","cpe:2.3:a:saltstack:salt:3001:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",4,[60,65,70,76,81,85,89,92],{"url":61,"source":62,"tags":63},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-11\u002Fmsg00029.html","Opensuse",[64],"Third Party Advisory",{"url":66,"source":67,"tags":68},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F160039\u002FSaltStack-Salt-REST-API-Arbitrary-Command-Execution.html","Packetstormsecurity",[64,69],"VDB Entry",{"url":71,"source":72,"tags":73},"https:\u002F\u002Fdocs.saltstack.com\u002Fen\u002Flatest\u002Ftopics\u002Freleases\u002Findex.html","Saltstack",[74,75],"Release Notes","Vendor Advisory",{"url":77,"source":78,"tags":79},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F12\u002Fmsg00007.html","Debian",[80,64],"Mailing List",{"url":82,"source":83,"tags":84},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FTPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA\u002F","Fedoraproject",[],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202011-13","Gentoo",[64],{"url":90,"source":78,"tags":91},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-4837",[64],{"url":93,"source":72,"tags":94},"https:\u002F\u002Fwww.saltstack.com\u002Fblog\u002Fon-november-3-2020-saltstack-publicly-disclosed-three-new-cves\u002F",[75],8,[97],{"id":98,"name":99,"description":100,"extendedDescription":101,"status":102,"abstraction":103,"structure":104},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":109,"metaDescription":110,"keywords":111,"canonicalUrl":112,"structuredData":113},"What is CVE-2020-25592? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-25592, a critical severity cyber security vulnerability from 2020. High exploit probability (56.8%). In SaltStack Salt thr...","CVE-2020-25592, CVE-2020-25592 vulnerability, CVE-2020-25592 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, saltstack security, debian security, salt vulnerability, debian_linux vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2020-25592",{"@context":114,"@type":115,"headline":109,"description":110,"datePublished":9,"dateModified":10,"author":116,"publisher":120,"about":124,"mainEntityOfPage":128,"articleSection":131,"keywords":132},"https:\u002F\u002Fschema.org","TechArticle",{"@type":117,"name":118,"url":119},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":117,"name":118,"url":119,"logo":121},{"@type":122,"url":123},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":125,"name":6,"description":126,"additionalType":127},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":129,"@id":130},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-25592","Cybersecurity","CVE-2020-25592, CVE-2020-25592 vulnerability, CVE-2020-25592 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[134,192],{"Operator":26,"Negate":26,"Nodes":135},[136],{"Operator":137,"Negate":26,"CPEMatch":138},"OR",[139,142,146,150,154,158,162,166,170,174,178,182,186,190],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":141,"VersionEndIncluding":26},"0F9405E3-F2B0-41BA-A39D-61BB38475A59","2015.8.10",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":144,"VersionEndExcluding":145,"VersionEndIncluding":26},"A35C23D3-82D4-46E7-BF08-9229C04C0C3D","2015.8.11","2015.8.13",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":148,"VersionEndExcluding":149,"VersionEndIncluding":26},"B4741BD5-4C40-48BC-A2C1-E6AB33818201","2016.3.0","2016.3.4",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":151,"VersionStartExcluding":26,"VersionStartIncluding":152,"VersionEndExcluding":153,"VersionEndIncluding":26},"7D28A2B5-316A-45DC-AC85-A0F743C4B3C4","2016.3.5","2016.3.6",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":156,"VersionEndExcluding":157,"VersionEndIncluding":26},"17C96153-85C1-45DC-A48B-46A3900246E2","2016.3.7","2016.3.8",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":160,"VersionEndExcluding":161,"VersionEndIncluding":26},"B0A54497-D7E2-4A2C-9719-4D992B296498","2016.11.0","2016.11.3",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":163,"VersionStartExcluding":26,"VersionStartIncluding":164,"VersionEndExcluding":165,"VersionEndIncluding":26},"920C57AF-6E88-465A-83FA-AB947D4C6F0B","2016.11.4","2016.11.6",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":167,"VersionStartExcluding":26,"VersionStartIncluding":168,"VersionEndExcluding":169,"VersionEndIncluding":26},"11D84847-0C8A-473A-9186-46FABD7BB59A","2016.11.7","2016.11.10",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":171,"VersionStartExcluding":26,"VersionStartIncluding":172,"VersionEndExcluding":173,"VersionEndIncluding":26},"C45ACC11-CA9B-4451-B6DD-BD784349CDE8","2017.5.0","2017.7.4",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":175,"VersionStartExcluding":26,"VersionStartIncluding":176,"VersionEndExcluding":177,"VersionEndIncluding":26},"BD998745-FA62-4894-A4FC-767F0DE131B9","2017.7.5","2017.7.8",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":180,"VersionEndExcluding":181,"VersionEndIncluding":26},"9747884A-8B29-42C9-BF5E-5B6D883A78E3","2018.2.0","2018.3.5",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":184,"VersionEndExcluding":185,"VersionEndIncluding":26},"F7A2912C-7F48-465D-B7F2-93ECD0D0CB74","2019.2.0","2019.2.5",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":188,"VersionEndExcluding":189,"VersionEndIncluding":26},"D64191C4-C3D3-4615-B7D5-26ADA8BD7C7B","3000.0","3000.3",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":191,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"74CAD70E-E77C-4010-B224-CEE3968CB6A2",{"Operator":26,"Negate":26,"Nodes":193},[194],{"Operator":137,"Negate":26,"CPEMatch":195},[196,198],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[202,209],{"id":203,"eventType":204,"eventTime":205,"details":206,"label":207,"color":208},"455804cc-c765-4b7f-8cbf-51416387e3d4","LOW_EPSS_DELTA","2025-09-17T04:09:27.931787+00:00","Daily EPSS score decreased by 0.141 on 2023-12-30","EPSS Score Decreased","green",{"id":210,"eventType":211,"eventTime":212,"details":213,"label":214,"color":215},"012b1203-d2a0-45d4-91de-b6df1b3e6316","HIGH_EPSS_DELTA","2025-10-05T04:05:01.185396+00:00","Daily EPSS score increased by 0.252 on 2023-12-30","EPSS Score Increased","red",{"lastModified":10,"cacheTime":217,"version":32},1793230611953,{"score":219,"band":220,"action":221,"scoredAt":222},59,"Medium","Plan remediation","2026-10-28T06:49:41.57111+00:00"]