CVE-2020-28243

An issue was discovered in SaltStack Salt before 3002.5

published February 27, 2021

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04302 · 91.1th percentile
Published
2021-02-27T00:00Z
EPSS history
Timeline
  • 27 FEB 00:00Z
    An issue was discovered in SaltStack Salt before 3002.5
    cvelistv5