CVE-2021-25282 — Vulnerability in salt — CVE Details

HIGH

SaltStack Salt Directory Traversal vulnerability

Published May 24, 2022Updated October 26, 2024Source: osv

Summary

An issue was discovered in through SaltStack Salt before 3002.5. The `salt.wheel.pillar_roots.write` method is vulnerable to directory traversal.

Advisory Timeline

First published May 24, 2022 (1602 days ago).
Last revised October 26, 2024 — 886 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

pip

Update salt to 3000.7 or later

pip install "salt>=3000.7"

pip

Update salt to 2016.11.5 or later

pip install "salt>=2016.11.5"

pip

Update salt to 3001.5 or later

pip install "salt>=3001.5"

pip

Update salt to 2016.11.10 or later

pip install "salt>=2016.11.10"

pip

Update salt to 2019.2.8 or later

pip install "salt>=2019.2.8"

pip

Update salt to 2015.8.13 or later

pip install "salt>=2015.8.13"

pip

Update salt to 3002.3 or later

pip install "salt>=3002.3"

pip

Update salt to 2017.7.8 or later

pip install "salt>=2017.7.8"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (9)

Affects 1 ecosystem: pypi (1).

Package	Ecosystem	Affected	Fixed In
salt	pypi	3000, 3000.1, 3000.2, 3000.3 (+3 more)	3000.7
salt	pypi	2016.11.0, 2016.11.0rc1, 2016.11.0rc2, 2016.11.1 (+12 more)	2016.11.5
salt	pypi	3001, 3001.1, 3001.2, 3001.3 (+1 more)	3001.5
salt	pypi	2018.3.0, 2018.3.0rc1, 2018.3.1, 2018.3.2 (+3 more)	Range-based data available
salt	pypi	2016.11.7, 2016.11.8, 2016.11.9	2016.11.10
salt	pypi	2019.2.0, 2019.2.1, 2019.2.2, 2019.2.3 (+4 more)	2019.2.8
salt	pypi	0.10.0, 0.10.1, 0.10.2, 0.10.3 (+106 more)	2015.8.13
salt	pypi	3002, 3002.1, 3002.2	3002.3
salt	pypi	2017.7.0, 2017.7.0rc1, 2017.7.1, 2017.7.2 (+5 more)	2017.7.8

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-22
Path TraversalMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.1 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

Frequently Asked Questions

What is CVE-2021-25282?: SaltStack Salt Directory Traversal vulnerability This vulnerability has been assigned a severity rating of HIGH (CVSS score: 9.1/10).
How do I check if my project is affected by CVE-2021-25282?: CVE-2021-25282 affects salt. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2021-25282 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.1

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-76x4-x3p6-rpr9

PYSEC-2021-51

Related CVEs

CVE-2020-25592
CRITICAL
SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
CVE-2024-38824
CRITICAL
Salt vulnerable to directory traversal attack in file receiving method
CVE-2021-3197
CRITICAL
SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
CVE-2021-3148
CRITICAL
SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
CVE-2020-16846
CRITICAL
SaltStack Salt Command Injection in netapi ssh client
CVE-2021-3144
CRITICAL
SaltStack Salt eauth tokens can be used once after expiration
CVE-2021-25283
CRITICAL
SaltStack Salt Server Side Template Injection
CVE-2021-25281
CRITICAL
SaltStack Salt Improper Authentication vulnerability

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies