virus logo FortiClient Vulnerability

SaltStack Salt CVE-2021-25281 Authentication Bypass Vulnerability

description-logoDescription

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

affected-products-logoAffected Applications

Salt

CVE References

CVE-2021-25281

Other References

https://saltproject.io/security_announcements/
ID 70394
Created Jan 21, 2022
Description
Updated		 Dec 18, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Windows
Vendor SaltStack
Patch manual
Application Salt