Unauthorized File System Access Vulnerability in SaltStack Salt

CVE-2021-21996

What is CVE-2021-21996?

A significant security issue was found in SaltStack Salt prior to version 3003.3, which allows a user with control over certain source and source_hash URLs to gain full root access to the file system of a salt minion. This can potentially lead to unauthorized alterations, data theft, or other malicious activities. Users of affected versions should prioritize applying available security updates to mitigate this vulnerability.

References