Description (CNA)
A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VMware / Salt Project | affected 0 before 3005.5, 3006.6 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.