Salt Project Minion Event Bus Authorization Bypass Vulnerability

A vulnerability exists in Salt Project versions 3007.0 and later, allowing an attacker with access to a minion key to bypass authorization on the minion event bus. This could enable the attacker to craft messages that execute jobs on other minions.

Impact

Exploitation of this vulnerability could lead to unauthorized job execution on other minions, potentially allowing for further exploitation or manipulation of those systems.