diff --git a/cves/2021/CVE-2021-25281.yaml b/cves/2021/CVE-2021-25281.yaml
index c9e2af51f6..a9c37d75ab 100644
--- a/cves/2021/CVE-2021-25281.yaml
+++ b/cves/2021/CVE-2021-25281.yaml
@@ -4,7 +4,7 @@ info:
   name: SaltStack Salt <3002.5 - Auth Bypass
   author: madrobot
   severity: critical
-  description: SaltStack Salt before 3002.5 does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.
+  description: SaltStack Salt before 3002.5 does not honor eauth credentials for the wheel_async client, allowing attackers to remotely run any wheel modules on the master.
   reference:
     - http://hackdig.com/02/hack-283902.htm
     - https://dozer.nz/posts/saltapi-vulns