Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-22004

Опубликовано: 08 сент. 2021
Источник: nvd
CVSS3: 6.4
CVSS2: 4.4
EPSS Низкий

Описание

An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*
Версия до 3000.3 (исключая)
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.00051
Низкий

6.4 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

ubuntu логотип

CVE-2021-22004

CVSS3: 6.4
ubuntu
больше 4 лет назад

An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software.

redhat логотип

CVE-2021-22004

CVSS3: 6.4
redhat
больше 4 лет назад

An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software.

debian логотип

CVE-2021-22004

CVSS3: 6.4
debian
больше 4 лет назад

An issue was discovered in SaltStack Salt before 3003.3. The salt mini ...

github логотип

GHSA-xf37-qcvf-7m57

CVSS3: 6.4
github
больше 3 лет назад

Improper Authentication in SaltStack Salt

EPSS

Процентиль: 16%
0.00051
Низкий

6.4 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362