CVE-2021-25281 – An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor e …

Vuln ID: CVE-2021-25281

Published:  2021-02-27  05:15:13Z

Description: An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):