An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: vmware
Published: 2021-09-08T15:00:14
Updated: 2021-09-25T00:07:52
Reserved: 2021-01-04T00:00:00
Link: CVE-2021-22004
JSON object: View
NVD Information
Status : Modified
Published: 2021-09-08T15:15:12.723
Modified: 2023-11-07T03:30:08.700
Link: CVE-2021-22004
JSON object: View
Redhat Information
No data.
CWE