Vulnerability Details : CVE-2021-25282

Public exploit exists!
An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.
Published 2021-02-27 05:15:14
Updated 2023-12-21 18:23:05
Source MITRE
View at NVD,   CVE.org
Vulnerability category: Directory traversal

Products affected by CVE-2021-25282

Exploit prediction scoring system (EPSS) score for CVE-2021-25282

EPSS FAQ
91.16%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2021-25282

  • SaltStack Salt API Unauthenticated RCE through wheel_async client
    Disclosure Date: 2021-02-25
    First seen: 2021-03-31
    exploit/linux/http/saltstack_salt_wheel_async_rce
    This module leverages an authentication bypass and directory traversal vulnerabilities in Saltstack Salt's REST API to execute commands remotely on the `master` as the root user. Every 60 seconds, `salt-master` service performs a maintenance proces

CVSS scores for CVE-2021-25282

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
6.4
 MEDIUM AV:N/AC:L/Au:N/C:N/I:P/A:P
10.0
4.9
 NIST
9.1
 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
3.9
5.2
 NIST

CWE ids for CVE-2021-25282

  • The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
    Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-25282

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close