2 matches found
SUSE CVE-2021-25281
An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can remotely run any wheel modules on the master...
9.8CVSS9.4AI score0.7313EPSS
SaveExploits4References32
CVE-2021-25281: Improper Authentication
An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can remotely run any wheel modules on the master...
9.8CVSS8.2AI score0.7313EPSS
SaveExploits4References2
20