SaltStack Update
2785Warning Date
Severity Level
Warning Number
Target Sector
3 May, 2020
● Critical
2020-1200
All
Description:
A group of F-Secure researchers has discovered two vulnerabilities in the following product:
- SaltStack Salt
- Versions before 2019.2.4
- Versions 3000 before 3000.2
Threats:
Remote attackers could exploit these vulnerabilities by executing arbitrary code as a root.
Best practice and Recommendations:
The CERT team encourages users to review SaltStack security advisory and apply the necessary update: