virus logo FortiClient Vulnerability

SaltStack Salt CVE-2021-3148 Command Injection Vulnerability

description-logoDescription

An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.

affected-products-logoAffected Applications

Salt

CVE References

CVE-2021-3148

Other References

https://saltproject.io/security_announcements/
ID 70397
Created Jan 21, 2022
Description
Updated		 Dec 18, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Windows
Vendor SaltStack
Patch manual
Application Salt