SaltStack Updates
1728Warning Date
Severity Level
Warning Number
Target Sector
2 March, 2021
● High
2021-2544
All
Description:
Salt Project has released security updates to address multiple vulnerabilities in the following product:
- SaltStack Salt minions
- Versions before 3002.5
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Privilege escalation
- Directory traversal
- Command injection
Best practice and Recommendations:
The CERT team encourages users to review Salt Project security advisory and apply the necessary updates: