Minion privilege escalation exploit patched in SaltStack Salt project
The privilege escalation vulnerability, tracked as CVE-2020-28243, could allow “an unprivileged user to create files in any non-blacklisted directory via a command injection in a process name.”
