SaltStack Salt CVE-2020-28243 Command Injection Vulnerability

Description

An issue was discovered in SaltStack Salt before 3002.5. The minion\'s restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.

Affected Applications

Salt

CVE References

Other References