CVE-2021-25284: 
Python vulnerability analysis and mitigation

An issue was discovered in SaltStack Salt before version 3002.5 where salt.modules.cmdmod could log credentials to the info or error log level (CVE Mitre, NVD).

The vulnerability affects the salt.modules.cmdmod component in SaltStack Salt, where sensitive credential information could be exposed through logging at info or error levels. This issue was assigned a CVSS 3.1 Base Score of 4.4 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N (Ubuntu Security).

The vulnerability could lead to the exposure of sensitive credentials through log files, potentially compromising system security if these logs are accessible to unauthorized users (Debian Security).

The vulnerability requires local access and high privileges to exploit. While the attack complexity is low, the scope is unchanged and no user interaction is required for exploitation (Ubuntu Security).

Users are advised to upgrade to SaltStack Salt version 3002.5 or later. Multiple distributions have released security updates to address this vulnerability, including Debian (2016.11.2+ds-1+deb9u7), Ubuntu (2017.7.4+dfsg1-1ubuntu18.04.2+esm1), and Gentoo (>=3000.8) (Debian LTS, Gentoo Security).