Salt management framework developed by SaltStack is a configuration tool used to monitor and update servers in datacenters and cloud environments. Multiple critical vulnerabilities with Salt let attackers retrieve user tokens from the salt-master and/or run arbitrary commands on salt minions.

Read full article on GBHackers