Vulnerability · Published Mar 29, 2022 · Assigned by vmware
CVE-2022-22936
High 8.8
In plain English
A high-severity security flaw in SaltStack Salt. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A sufficient craft attacker could gain root access on minion under certain scenarios.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | salt | 3004.1-r0 | ALPINE-CVE-2022-22936 |
| Alpine:v3.21 | salt | 3004.1-r0 | ALPINE-CVE-2022-22936 |
| Alpine:v3.22 | salt | 3004.1-r0 | ALPINE-CVE-2022-22936 |
| Alpine:v3.23 | salt | 3004.1-r0 | ALPINE-CVE-2022-22936 |
| Alpine:v3.24 | salt | 3004.1-r0 | ALPINE-CVE-2022-22936 |
| PyPI | salt | 3002.8 | GHSA-5r3f-3m3j-wcj2 |
| PyPI | salt | 3003.4 | GHSA-5r3f-3m3j-wcj2 |
| PyPI | salt | 3004.1 | GHSA-5r3f-3m3j-wcj2 |
| PyPI | salt | 3002.8 | PYSEC-2022-173 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | SaltStack Salt | SaltStack Salt prior to 3002.8, 3003.4, 3004.1 |
Weakness: CWE-294 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H