[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7cEmUHwALtpk_e3gAcjg8QE80hU6susfFUPj1Hy4KVU":3,"g5a-risk:CVE-2021-25281":259},{"success":4,"data":5,"meta":257},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":70,"references":71,"referencesCount":118,"weaknesses":119,"weaknessesCount":128,"isActivelyExploited":129,"cisaInfo":27,"otxData":27,"relatedBlogPosts":130,"seoMetadata":131,"configurations":156,"relatedVendorCves":241,"notableEvents":242},"CVE-2021-25281","What is CVE-2021-25281?","An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.","An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can ...","2021-02-27T05:15:13.847","2023-12-21T18:22:27.313",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.72945,[39,39,39,39,39,39,39],"Critical",[43,48,53,56,59,64,67],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"saltstack","salt","*","cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"fedoraproject","fedora","32","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"33","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":65,"criteria":66,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":68,"criteria":69,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",7,[72,79,84,89,93,96,99,104,108,111,114],{"url":73,"source":74,"tags":75},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F162058\u002FSaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html","Packetstormsecurity",[76,77,78],"Exploit","Third Party Advisory","VDB Entry",{"url":80,"source":81,"tags":82},"https:\u002F\u002Fgithub.com\u002Fsaltstack\u002Fsalt\u002Freleases","GitHub",[83,77],"Release Notes",{"url":85,"source":86,"tags":87},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F11\u002Fmsg00009.html","Debian",[88,77],"Mailing List",{"url":90,"source":91,"tags":92},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB\u002F","Fedoraproject",[88,77],{"url":94,"source":91,"tags":95},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH\u002F",[88,77],{"url":97,"source":91,"tags":98},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5\u002F",[88,77],{"url":100,"source":101,"tags":102},"https:\u002F\u002Fsaltproject.io\u002Fsecurity_announcements\u002Factive-saltstack-cve-release-2021-feb-25\u002F","Saltproject",[103],"Vendor Advisory",{"url":105,"source":106,"tags":107},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202103-01","Gentoo",[77],{"url":109,"source":106,"tags":110},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202310-22",[77],{"url":112,"source":86,"tags":113},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-5011",[77],{"url":115,"source":116,"tags":117},"https:\u002F\u002Fwww.saltstack.com\u002Fblog\u002Factive-saltstack-cve-announced-2021-jan-21\u002F","Saltstack",[103],11,[120],{"id":121,"name":122,"description":123,"extendedDescription":124,"status":125,"abstraction":126,"structure":127},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":132,"metaDescription":133,"keywords":134,"canonicalUrl":135,"structuredData":136},"What is CVE-2021-25281? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-25281, a critical severity cyber security vulnerability from 2021. High exploit probability (72.9%). An issue was discover...","CVE-2021-25281, CVE-2021-25281 vulnerability, CVE-2021-25281 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, saltstack security, fedoraproject security, debian security, salt vulnerability, fedora vulnerability, debian_linux vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2021-25281",{"@context":137,"@type":138,"headline":132,"description":133,"datePublished":10,"dateModified":11,"author":139,"publisher":143,"about":147,"mainEntityOfPage":151,"articleSection":154,"keywords":155},"https:\u002F\u002Fschema.org","TechArticle",{"@type":140,"name":141,"url":142},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":140,"name":141,"url":142,"logo":144},{"@type":145,"url":146},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":148,"name":6,"description":149,"additionalType":150},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":152,"@id":153},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-25281","Cybersecurity","CVE-2021-25281, CVE-2021-25281 vulnerability, CVE-2021-25281 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[157,221,231],{"Operator":27,"Negate":27,"Nodes":158},[159],{"Operator":160,"Negate":27,"CPEMatch":161},"OR",[162,165,169,173,177,181,185,189,193,197,201,205,209,213,217],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":164,"VersionEndIncluding":27},"0F9405E3-F2B0-41BA-A39D-61BB38475A59","2015.8.10",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":167,"VersionEndExcluding":168,"VersionEndIncluding":27},"A35C23D3-82D4-46E7-BF08-9229C04C0C3D","2015.8.11","2015.8.13",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":170,"VersionStartExcluding":27,"VersionStartIncluding":171,"VersionEndExcluding":172,"VersionEndIncluding":27},"B4741BD5-4C40-48BC-A2C1-E6AB33818201","2016.3.0","2016.3.4",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":174,"VersionStartExcluding":27,"VersionStartIncluding":175,"VersionEndExcluding":176,"VersionEndIncluding":27},"7D28A2B5-316A-45DC-AC85-A0F743C4B3C4","2016.3.5","2016.3.6",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":178,"VersionStartExcluding":27,"VersionStartIncluding":179,"VersionEndExcluding":180,"VersionEndIncluding":27},"17C96153-85C1-45DC-A48B-46A3900246E2","2016.3.7","2016.3.8",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":182,"VersionStartExcluding":27,"VersionStartIncluding":183,"VersionEndExcluding":184,"VersionEndIncluding":27},"67FBC561-336A-4F25-B347-C4CA029B6E30","2016.3.9","2016.11.3",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":186,"VersionStartExcluding":27,"VersionStartIncluding":187,"VersionEndExcluding":188,"VersionEndIncluding":27},"A5E17739-655C-4FAC-A73B-985132B32C73","2016.11.4","2016.11.5",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":190,"VersionStartExcluding":27,"VersionStartIncluding":191,"VersionEndExcluding":192,"VersionEndIncluding":27},"11D84847-0C8A-473A-9186-46FABD7BB59A","2016.11.7","2016.11.10",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":194,"VersionStartExcluding":27,"VersionStartIncluding":195,"VersionEndExcluding":196,"VersionEndIncluding":27},"3721B047-2595-4E79-8FDD-B1224FC0DD2C","2017.5.0","2017.7.8",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":198,"VersionStartExcluding":27,"VersionStartIncluding":199,"VersionEndExcluding":27,"VersionEndIncluding":200},"EB8FA088-6AAD-46DF-884C-7362CB4BE430","2018.2.0","2018.3.5",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":202,"VersionStartExcluding":27,"VersionStartIncluding":203,"VersionEndExcluding":204,"VersionEndIncluding":27},"F7A2912C-7F48-465D-B7F2-93ECD0D0CB74","2019.2.0","2019.2.5",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":206,"VersionStartExcluding":27,"VersionStartIncluding":207,"VersionEndExcluding":208,"VersionEndIncluding":27},"40369149-A5C3-4759-844F-3510559397C5","2019.2.6","2019.2.8",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":210,"VersionStartExcluding":27,"VersionStartIncluding":211,"VersionEndExcluding":212,"VersionEndIncluding":27},"906D2835-186A-455E-84EB-E982564B9CBD","3000","3000.6",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":214,"VersionStartExcluding":27,"VersionStartIncluding":215,"VersionEndExcluding":216,"VersionEndIncluding":27},"5F0E0DA3-49F7-4938-9FBD-F3680B1BDBB6","3001","3001.4",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":218,"VersionStartExcluding":27,"VersionStartIncluding":219,"VersionEndExcluding":220,"VersionEndIncluding":27},"6B757DF0-6490-4FE7-9C98-5D8C700A4377","3002","3002.5",{"Operator":27,"Negate":27,"Nodes":222},[223],{"Operator":160,"Negate":27,"CPEMatch":224},[225,227,229],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":226,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"36D96259-24BD-44E2-96D9-78CE1D41F956",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":228,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E460AA51-FCDA-46B9-AE97-E6676AA5E194",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":230,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A930E247-0B43-43CB-98FF-6CE7B8189835",{"Operator":27,"Negate":27,"Nodes":232},[233],{"Operator":160,"Negate":27,"CPEMatch":234},[235,237,239],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":236,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":238,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":240,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FA6FEEC2-9F11-4643-8827-749718254FED",[],[243,250],{"id":244,"eventType":245,"eventTime":246,"details":247,"label":248,"color":249},"a23ad5e1-3774-4b2d-be5c-a67f64d3e67e","LOW_EPSS_DELTA","2025-11-19T04:06:05.28464+00:00","Daily EPSS score decreased by 0.144 on 2023-12-30","EPSS Score Decreased","green",{"id":251,"eventType":252,"eventTime":253,"details":254,"label":255,"color":256},"fc1f0aae-c06a-4c2e-9206-9bf7d943bde6","HIGH_EPSS_DELTA","2025-11-22T04:05:52.646742+00:00","Daily EPSS score increased by 0.144 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":258,"version":33},1793211931081,{"score":260,"band":261,"action":262,"scoredAt":263},65,"Medium","Plan remediation","2026-07-01T10:26:08.271284+00:00"]