CVE-2021-3144: 
Python vulnerability analysis and mitigation

CVE-2021-3144 affects SaltStack Salt versions before 3002.5, where eauth tokens can be used once after expiration, potentially allowing unauthorized command execution against the salt master or minions. The vulnerability was disclosed in February 2021 and received a CVSS v3.1 base score of 9.1 (CRITICAL) (NVD).

The vulnerability is classified as an Insufficient Session Expiration (CWE-613) issue. The critical severity rating (CVSS v3.1 score of 9.1) is based on the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, indicating network accessibility, low attack complexity, no privileges required, no user interaction needed, and high impact on confidentiality and integrity (NVD).

The vulnerability allows expired eauth tokens to be used one additional time after expiration, which could enable unauthorized users to execute commands against the salt master or minions. This poses significant risks to system security and data integrity (Salt Advisory).

The vulnerability is considered highly exploitable due to its network accessibility and low attack complexity. No special privileges or user interaction is required to exploit this vulnerability (NVD).

The vulnerability was fixed in Salt version 3002.5. Users are strongly advised to upgrade to this version or later. Multiple distributions have released security updates, including Debian (2016.11.2+ds-1+deb9u7), Fedora (3002.5-1), and Gentoo (>=3000.8) (Debian LTS, Fedora Update, Gentoo Advisory).