5 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-21996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and sourcehash URLs can gain full file system access as root on a...
Authentication Bypass
salt is vulnerable to authentication bypass. The vulnerability exists in the validatetgt function in minions.py because the publisher acls are not properly applied when the minions are behind a syndic which allows a user to access and publish commands to any configured minion...
CVE-2021-21996
An Exposure of Resource to Wrong Sphere flaw was found in Salt. This flaw allows a user who has control of the source and sourcehash URLs to gain full file system access as root on a Salt minion...
