PT-2022-15695 · Saltstack · Saltstack Salt

Published 2022-07-01 · Updated 2022-07-03 · CVE-2022-2282

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions saltstack/salt versions prior to 3004.2

Description The issue is related to improper authorization in the saltstack/salt GitHub repository.

Recommendations For versions prior to 3004.2, update to version 3004.2 or later to resolve the issue.

Related Identifiers

CVE-2022-2282

Affected Products

Saltstack Salt

References · 8

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-2282 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2282 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-2282 · Security Note
• https://ubuntu.com/security/CVE-2022-2282 · Vendor Advisory
• https://github.com/saltstack/salt/commit/d9343cca650d7197d3f6e107ffd506d25a8748ab · Note
• https://huntr.dev/bounties/144659fe-49e1-4c47-923f-fe870b2ec4bd · Note
• https://t.me/cibsecurity/45472 · Telegram Post
• https://t.me/cvenotify/32475 · Telegram Post