CVE-2021-21996 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Arbitrary filesystem access |
| Description | An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2354 | salt | 3003.2-1 | 3003.3-1 | Medium | Fixed |
| References |
|---|
https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/ |