Lucene search

K
redhatcveRedhat.comRH:CVE-2021-22004
HistoryJan 18, 2022 - 11:45 a.m.

CVE-2021-22004

2022-01-1811:45:07
redhat.com
access.redhat.com
7

0.0004 Low

EPSS

Percentile

5.2%

An improper authentication flaw was found in SaltStack salt before version 3003.3. The Salt minion installer accepts and uses a minion config file at C:\salt\conf if that file is in place before the installer is run. This flaw allows a malicious actor to subvert the proper behavior of the given minion software.