Skip to content
OpenAdvisories

Archive

27 February 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.4

    SaltStack Salt Improper SSL Certificate Validation

    In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.

  • High 7.8
    CVE-2020-28243 Public exploit

    SaltStack Salt command injection via a crafted process name

    An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blackliste…