CVE-2020-8028

CVE-2020-8028 is an improper access control vulnerability in Salt configuration used by SUSE Manager Server/Proxy/Retail components. Local users can escalate to root on managed systems; on the managing node, code may run as the salt user enabling escalation there. Affected versions include SUSE M...