CVE-2021-21996
EUVD-2021-022508.09.2021, 15:15
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| saltstack | salt | 𝑥 < 3000.3 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| debian | debian_linux | 11.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References