PYSEC-2021-318

vendorUSosv

view advisory published 2021-09-08Licence: CC-BY-4.0

An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-21996US	high7.5	3.51% (89th)	—	2021-09-08
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.

references

External citations — patches, advisories, analysis.

https://github.com/advisories/GHSA-pf7h-h2wq-m7pgADVISORY
https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan