GitHub Advisoryadvisory · PyPI

GHSA-5r3f-3m3j-wcj2 SaltStack Salt Authentication Bypass by Capture-replay

HIGH Published 2022-03-30 Modified 2024-10-22 Official page ↗
Aliases
CVE-2022-22936
Ecosystem
PyPI
Packages
salt
Severity
High
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-294
Reviewed
2024-04-22

Affected packages

• PyPI salt: < 3002.8 → fixed in 3002.8 • PyPI salt: >= 3003, < 3003.4 → fixed in 3003.4 • PyPI salt: >= 3004, < 3004.1 → fixed in 3004.1

Description

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A sufficient craft attacker could gain root access on minion under certain scenarios.

Related

Alias · CVE (1)

  • CVE-2022-22936 An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. vulnerability

Weakness · CWE (1)

  • CWE-294 Authentication Bypass by Capture-replay weakness

References