FreeBSD : salt -- salt-api vulnerability (8c98e643-6008-11ea-af63-38d547003487)

SaltStack reports : With the Salt NetAPI enabled in addition to having a SSH roster defined, unauthenticated access is possible when specifying the client as SSH. Additionally, when the rawshell option is specified any arbitrary command may be run on the Salt master when specifying SSH options. C...