VMware SaltStack Arbitrary Command Execution Vulnerability via On-Demand Pillar Functionality

A vulnerability exists in VMware SaltStack that allows an attacker with access to a minion key to exploit the 'on demand' pillar functionality. By using a specially crafted Git URL, the attacker can execute arbitrary commands on the Salt master with the same privileges as the master process. This issue is present in Salt versions 3006.12 and 3007.0 through 3007.4.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands on the Salt master, potentially allowing for privilege escalation or other malicious actions, depending on the commands executed.