PT-2021-5491 · Saltstack+3 · Saltstack Salt+3

Published

2016-11-21

·

Updated

2024-08-08

·

CVE-2021-3148

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SaltStack Salt versions prior to 3002.5
Description The issue is related to insufficient argument checking in the salt.utils.thin.gen thin() function, allowing for command injection when crafted web requests are sent to the Salt API. This is due to different handling of single versus double quotes. The vulnerability is related to the salt/utils/thin.py module.
Recommendations For versions prior to 3002.5, update to version 3002.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Salt API to minimize the risk of exploitation. Avoid using the salt.utils.thin.gen thin() function until the issue is resolved.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

ALT-PU-2016-2317
ALT-PU-2017-2801
ALT-PU-2018-2416
ALT-PU-2019-2322
ALT-PU-2019-2359
ALT-PU-2021-1590
ALT-PU-2021-1591
ALT-PU-2021-1982
ALT-PU-2022-3218
BDU:2021-06340
CVE-2021-3148
DLA-2815-1
DSA-5011-1
GHSA-GHC2-HX3W-JQMP
OPENSUSE-SU-2021:0347-1
OPENSUSE-SU-2021_0347-1
PYSEC-2021-55
SUSE-RU-2021:0632-1
SUSE-RU-2021:0633-1
SUSE-SU-2021:0624-1
SUSE-SU-2021:0626-1
SUSE-SU-2021:0627-1
SUSE-SU-2021:0628-1
SUSE-SU-2021:0630-1
SUSE-SU-2021:0631-1
SUSE-SU-2021:0914-1
SUSE-SU-2021:0915-1
SUSE-SU-2021:14650-1
SUSE-SU-2021:1690-1
SUSE-SU-2021_14650-1
SUSE-SU-2021_14682-1
USN-6948-1

Affected Products

Alt Linux
Saltstack Salt
Suse
Ubuntu