CVE-2021-25315criticalCWE-287

CVE-2021-25315: critical vulnerability in SUSE Linux Enterprise Server 15 SP 3

salt-api unauthenticated remote code execution

Published · Updated

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 2.3%
exploitation probability
2.3%top 17% of all CVEs
observed exploitation
nono source reports it
In short

The salt-api service in SUSE Linux Enterprise Server and openSUSE allows attackers to run malicious code on the system without needing a valid password or credentials. This is critical because salt is used to manage and control servers, so unauthorized access means complete system compromise.

Technical detail

CWE-287 improper authentication flaw in salt-api enables unauthenticated remote code execution on SUSE Linux Enterprise Server 15 SP3 and openSUSE Tumbleweed. The vulnerability permits local attackers to bypass credential validation and execute arbitrary commands with salt privileges; affected versions are prior to 3002.2-3 (SLES) and 3002.2-2.1 (Tumbleweed).

Summary generated and translated by AI from the official description.
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
openSUSE · TumbleweedSUSE · SUSE Linux Enterprise Server 15 SP 3
Related CVEs — SUSE Linux Enterprise Server 15 SP 3

In the same product, most dangerous first.

CVE-2024-49505MEDIUMXSS vulnerability found in OpenSuse MirrorCacheEPSS 0.4%CVE-2022-31250HIGHkeylime %post scriplet allows for privilege escalation from keylime user to rootEPSS 0.3%CVE-2023-32183HIGHCVE-2023-32183EPSS 0.2%CVE-2025-53881MEDIUMSUSE-specific logrotate configuration allows escalation from mail user/group to rootEPSS 0.2%CVE-2025-46810HIGHCVE-2025-46810EPSS 0.2%CVE-2026-104618MEDIUMsdbootutil: world-readable debug logEPSS 0.1%
References
https://bugzilla.suse.com/show_bug.cgi?id=1182382