CVE-2021-21996 PUBLISHED

An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.

EPSS 2.74% · 85.9th percentile

Risk Scores

EPSS Score
2.74%
85.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSsalt0, 2016.11.5+ds-1, 2016.11.8+dfsg1-1
Ubuntu:22.04:LTSsalt3004+dfsg1-6ubuntu1, 3004+dfsg1-4, 3002.7+dfsg1-1
Ubuntu:Pro:16.04:LTSsalt2015.8.8+ds-1, 0, 2015.5.3+ds-1
Ubuntu:Pro:14.04:LTSsalt0, 0.17.5+ds-1ubuntu0.1~esm4, 0.17.5+ds-1ubuntu0.1~esm2

Timeline

References

Open in Interactive Console →