GHSA-jh7c-xh74-h76fHighCVSS 8.1
Salt has minion event bus authorization bypass vulnerability
🔗 CVE IDs covered (1)
📋 Description
Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>= 3007.0).
🎯 Affected products2
- pip/salt:>= 3007.0, < 3007.4
- pip/salt:>= 3006.0, < 3006.12