Improper Authentication in Salt - CVE-2021-22004
Published: November 23, 2021
Vulnerability identifier: #VU58293
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-22004
CWE-ID: CWE-287
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to the salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. A local user with ability to create files in the said directory can subvert the proper behavior of the given minion software.
Affected software
Salt
Fedora
salt
Fedora
salt
How to mitigate CVE-2021-22004
Install updates from vendor's website.
Salt - addressed in versions 3001.8, 3002.7, 3003.3
salt - addressed in versions 3003.3-1.fc33, 3003.3-1.fc34, 3003.3-1.fc35
salt - addressed in versions 3003.3-1.fc33, 3003.3-1.fc34, 3003.3-1.fc35