[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxGzDP-jjXookEpJiJRHxjdnxadDasMGhjJwdfovKBcU":3,"g5a-risk:CVE-2021-25315":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":26,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":66,"references":67,"referencesCount":74,"weaknesses":75,"weaknessesCount":74,"isActivelyExploited":84,"cisaInfo":26,"otxData":26,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":127,"notableEvents":128},"CVE-2021-25315","What is CVE-2021-25315?","CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.","CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary...","2021-03-03T10:15:13.94","2023-06-22T09:15:09.793",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":38,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":28},"meissner@suse.de","Secondary",{"Version":20,"VectorString":33,"AttackVector":34,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK",9.8,"CRITICAL",3.9,[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":45,"ExploitabilityScore":37,"ImpactScore":46,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.6,"MEDIUM",6.4,0.02333,[47,47,47,47,47,47,47],"High",[51,56,61],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"saltstack","salt","*","cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"opensuse","tumbleweed","-","cpe:2.3:o:opensuse:tumbleweed:-:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"suse","suse_linux_enterprise_server","15","cpe:2.3:o:suse:suse_linux_enterprise_server:15:sp3:*:*:*:*:*:*",3,[68],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1182382","Suse",[72,73],"Issue Tracking","Vendor Advisory",1,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2021-25315? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-25315, a high severity cyber security vulnerability from 2021. CWE - CWE-287: Improper Authentication vulnerability in SUS...","CVE-2021-25315, CVE-2021-25315 vulnerability, CVE-2021-25315 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, saltstack security, opensuse security, suse security, salt vulnerability, tumbleweed vulnerability, suse_linux_enterprise_server vulnerability","\u002Fwhat-is\u002Fcve-2021-25315",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-25315","Cybersecurity","CVE-2021-25315, CVE-2021-25315 vulnerability, CVE-2021-25315 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112],{"Operator":113,"Negate":26,"Nodes":114},"AND",[115,121],{"Operator":116,"Negate":26,"CPEMatch":117},"OR",[118],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":119,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":120,"VersionEndIncluding":26},"A696063D-82E2-4F3B-8E0F-CA7141CC6A22","3002.2",{"Operator":116,"Negate":26,"CPEMatch":122},[123,125],{"Vulnerable":26,"Criteria":60,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"107C84EE-5E5C-4C36-A6DA-295144A527E9",{"Vulnerable":26,"Criteria":65,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"484ABC86-9E8B-4645-8A52-DB2343649E3A",[],[],{"lastModified":11,"cacheTime":130,"version":41},1793211210336,{"score":132,"band":133,"action":134,"scoredAt":135},55,"Medium","Plan remediation","2026-07-01T10:26:08.282346+00:00"]