Cache Directory Misconfiguration in Salt Master Impacting Git Providers

CVE-2023-20898

What is CVE-2023-20898?

The improper management of cache directory names in Salt masters prior to versions 3005.2 and 3006.2 can allow Git Providers to access incorrect environment data. This vulnerability results in potential issues such as erroneous data disclosure, unexpected execution of commands, data corruption, and even system crashes. Organizations relying on Git Providers with different environments may encounter significant operational risks due to this flaw.

References