Minion privilege escalation exploit patched in SaltStack Salt project

The Salt Project has patched a privilege escalation bug impacting SaltStack Salt minions that could be used during a wider exploit chain. The vulnerability, CVE-2020-28243, is described as a privilege escalation bug impacting SaltStack Salt minions allowing “an unprivileged user to create files in any non-blacklisted directory via a command injection in a process name.”

Read full article on ZDNet

 

Date:

Categorie(s):

Tag(s):

, , , ,