Lucene search
+L

7 matches found

Tenable Nessus
Tenable Nessus
•added 2025/09/02 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2021-25281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can...

9.8CVSS8.2AI score0.7313EPSS
SaveExploits5References2
osv_ghsa
osv_ghsa
•added 2022/05/24 5:43 p.m.•53 views

GHSA-XXW3-765M-F37P SaltStack Salt Improper Authentication vulnerability

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can remotely run any wheel modules on the master...

9.8CVSS9.4AI score0.7313EPSS
SaveExploits5References20
PyPA
PyPA
•added 2021/02/27 5:15 a.m.•14 views

PYSEC-2021-50

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can remotely run any wheel modules on the master...

9.8CVSS7AI score0.7313EPSS
SaveExploits5References9Affected Software1
Cvelist
Cvelist
•added 2021/02/27 12:00 a.m.•53 views

CVE-2021-25281

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can remotely run any wheel modules on the master...

9.6AI score0.7313EPSS
SaveExploits5References11
Vulnrichment
Vulnrichment
•added 2021/02/27 12:00 a.m.•25 views

CVE-2021-25281

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can remotely run any wheel modules on the master...

6.7AI score0.7313EPSS
SaveExploits5References11
Mend
Mend
•added 2021/02/27 12:00 a.m.•7 views

CVE-2021-25281

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can remotely run any wheel modules on the master...

9.8CVSS0.7313EPSS
SaveExploits5References25
Debian CVE
Debian CVE
•added 2021/02/27 12:00 a.m.•44 views

CVE-2021-25281

Removed by vendor...

9.8CVSS9.2AI score0.7313EPSS
SaveExploits5
Rows per page
Query Builder