Lucene search
GoogleOSV:PYSEC-2021-54HistoryFeb 27, 2021 - 5:15 a.m.
PYSEC-2021-54
2021-02-2705:15:00
Google
osv.dev
9
saltstack
security
eauth tokens
exploitation
command execution
EPSS
0.054
Percentile
93.2%
In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master or minions.)
References
github.com/saltstack/salt/releases
lists.fedoraproject.org/archives/list/[email protected]/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
lists.fedoraproject.org/archives/list/[email protected]/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
lists.fedoraproject.org/archives/list/[email protected]/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
security.gentoo.org/glsa/202103-01
Related
osv
osv
SaltStack Salt eauth tokens can be used once after expiration
2022-05-24 17:43:23
CVE-2021-3144
2021-02-27 05:15:14
salt - security update
2021-11-10 00:00:00
prion
prion
Command injection
2021-02-27 05:15:00
ubuntucve
ubuntucve
CVE-2021-3144
2021-02-27 00:00:00
github
github
SaltStack Salt eauth tokens can be used once after expiration
2022-05-24 17:43:23
alpinelinux
alpinelinux
CVE-2021-3144
2021-02-27 05:15:14
debiancve
debiancve
CVE-2021-3144
2021-02-27 05:15:14
veracode
veracode
Insecure Session Management
2021-03-01 05:52:07
cve
cve
CVE-2021-3144
2021-02-27 05:15:14
redhatcve
redhatcve
CVE-2021-3144
2021-02-26 19:02:57
cvelist
cvelist
CVE-2021-3144
2021-02-27 00:00:00
nvd
nvd
CVE-2021-3144
2021-02-27 05:15:14
nessus
nessus
Photon OS 3.0: Salt3 PHSA-2021-3.0-0200
2021-02-27 00:00:00
GLSA-202103-01 : Salt: Multiple vulnerabilities
2021-04-01 00:00:00
openSUSE Security Update : salt (openSUSE-2021-347)
2021-03-01 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0631-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0630-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0628-1)
2021-04-19 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: salt-3001.6-1.fc32
2021-03-02 15:35:09
[SECURITY] Fedora 34 Update: salt-3002.5-1.fc34
2021-03-19 20:22:58
[SECURITY] Fedora 33 Update: salt-3002.5-1.fc33
2021-03-02 15:56:30
freebsd
freebsd
salt -- multiple vulnerabilities
2021-02-25 00:00:00
gentoo
gentoo
Salt: Multiple vulnerabilities
2021-03-31 00:00:00
Salt: Multiple Vulnerabilities
2023-10-31 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0364
2021-02-26 00:00:00
Important Photon OS Security Update - PHSA-2021-0364
2021-02-27 00:00:00
Critical Photon OS Security Update - PHSA-2021-0047
2021-06-16 00:00:00
suse
suse
Security update for salt (critical)
2021-02-26 00:00:00
archlinux
archlinux
[ASA-202102-33] salt: multiple issues
2021-02-27 00:00:00
debian
debian
[SECURITY] [DLA 2815-1] salt security update
2021-11-10 18:08:20
[SECURITY] [DSA 5011-1] salt security update
2021-11-19 11:19:25