CVE-2021-25315
2 advisories.
PyPI/salt CVE-2021-25315: high 7.8, EPSS 2.29%
Saltstack Salt Unauthenticated Arbitrary Code Execution
Action: Upgrade salt to 3002.2 or later.
pip install salt==3002.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3002.2 | - |
Fixed versions
| 3002.2 |
Sources
- osv: GHSA-pmj6-9f8c-8g2m
- https://nvd.nist.gov/vuln/detail/CVE-2021-25315
- https://bugzilla.suse.com/show_bug.cgi?id=1182382
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml
- https://github.com/saltstack/salt
CVE-2021-25315 · published · modified · JSON
PyPI/salt CVE-2021-25315: high 7.8, EPSS 2.29%
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify
Action: Upgrade salt to 3002.2 or later.
pip install salt==3002.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3002.2 | - |
Fixed versions
| 3002.2 |
Sources
- osv: PYSEC-2021-891
- https://bugzilla.suse.com/show_bug.cgi?id=1182382
- https://github.com/advisories/GHSA-pmj6-9f8c-8g2m
CVE-2021-25315 · published · modified · JSON