CVE-2021-22004

🗓️ 08 Sep 2021 15:00:14Reported by vmwareType

Issue in SaltStack Salt before 3003.3 allows malicious actor to subvert minion software behavior

Reporter	Title	Published	Views	Family All 47
AlpineLinux	CVE-2021-22004	8 Sep 202115:00	–	alpinelinux
CNNVD	SaltStack Salt竞争条件问题漏洞	8 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-22004	8 Sep 202115:00	–	cvelist
Debian CVE	CVE-2021-22004	8 Sep 202115:00	–	debiancve
EUVD	EUVD-2021-0226	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 35 Update: salt-3003.3-1.fc35	24 Sep 202120:51	–	fedora
Fedora	[SECURITY] Fedora 33 Update: salt-3003.3-1.fc33	9 Sep 202117:46	–	fedora
Fedora	[SECURITY] Fedora 34 Update: salt-3003.3-1.fc34	9 Sep 202117:33	–	fedora
Tenable Nessus	Fedora 34 : salt (2021-00ada7e667)	10 Sep 202100:00	–	nessus
Tenable Nessus	Fedora 33 : salt (2021-93a7c8b7c6)	10 Sep 202100:00	–	nessus

NVD

Node

saltstack saltRange<3000.3

AND

microsoft windowsMatch-

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

[
  {
    "product": "Saltstack Salt",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Saltstack Salt (before 3003.3)"
      }
    ]
  }
]

Source	Link
saltproject	www.saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/

21 Nov 2024 05:49Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.4

CVSS 3.16.4

EPSS0.0014

CWE-362