Security Advisory

CVE-2021-25281

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-02-27 00:00:00

Last updated 2024-11-19 15:42:15

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

← Browse all CVEs View on cve.org ↗