Information Disclosure

salt is vulnerable to information disclosure. The library displays the password of a newly created user in plaintext to the user that just created a new user account...

Remote Code Execution (RCE)

salt is vulnerable to remote code execution RCE. The library does not clear messages on the minion, meaning a malicious user can conduct a Man-in-the-Middle MitM attack to execute arbitrary code by inserting packets into the datastream...