Related Vulnerabilities: CVE-2021-25284  

A security issue was found in SaltStack before versions 3002.5, 3001.6 and 3000.8. Webutils write passwords in cleartext to /var/log/salt/minion. This issue is not present in a default configuration of Salt.

Severity Medium

Remote No

Type Information disclosure

Description

A security issue was found in SaltStack before versions 3002.5, 3001.6 and 3000.8. Webutils write passwords in cleartext to /var/log/salt/minion. This issue is not present in a default configuration of Salt.

AVG-1624 salt 2019.2.7-1 High Vulnerable

https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/