Lucene search

K
cvelistMitreCVELIST:CVE-2021-3197
HistoryFeb 27, 2021 - 12:00 a.m.

CVE-2021-3197

2021-02-2700:00:00
mitre
raw.githubusercontent.com
1

6.4 Medium

AI Score

Confidence

Low

0.848 High

EPSS

Percentile

98.5%

An issue was discovered in SaltStack Salt before 3002.5. The salt-api’s ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.