CVE-2021-25281 PoC — Saltstack SaltStack Salt 授权问题漏洞

Source

https://github.com/Immersive-Labs-Sec/CVE-2021-25281

Associated Vulnerability

Title:Saltstack SaltStack Salt 授权问题漏洞 (CVE-2021-25281)
Description:Saltstack SaltStack Salt是SaltStack（Saltstack）公司的一套开源的用于管理基础架构的工具。该工具提供配置管理、远程执行等功能。 SaltStack Salt before 3002.5 存在安全漏洞，该漏洞源于salt-api不支持eauth凭据。攻击者可利用该漏洞可以远程运行主机上的任何模块。

Description

Chaining CVE-2021-25281 and CVE-2021-25282 to exploit a SaltStack

Readme

# CVE-2021-25281
Chaining CVE-2021-25281 and CVE-2021-25282 to exploit a SaltStack

File Snapshot


 [4.0K]  /data/pocs/21041401ef16d9860be9a2f7ea8e023cc15c9e8a
├── [4.7K]  cve-2021-25281.py
├── [1.0K]  LICENSE
└── [  83]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!