PT-2022-15744 · Saltstack+2 · Saltstack Salt+2

Published 2022-03-29 · Updated 2023-12-21 · CVE-2022-22936

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SaltStack Salt versions prior to 3002.8 SaltStack Salt versions prior to 3003.4 SaltStack Salt versions prior to 3004.1

Description An issue was discovered in SaltStack Salt where job publishes and file server replies are susceptible to replay attacks. This can result in an attacker replaying job publishes, causing minions to run old jobs. File server replies can also be re-played, potentially allowing a sufficiently crafty attacker to gain root access on a minion under certain scenarios.

Recommendations For versions prior to 3002.8, update to version 3002.8 or later. For versions prior to 3003.4, update to version 3003.4 or later. For versions prior to 3004.1, update to version 3004.1 or later.

Fix

Weakness Enumeration

CWE-294

Related Identifiers

ALT-PU-2022-3177

ALT-PU-2022-3214

ALT-PU-2022-3218

CVE-2022-22936

GHSA-5R3F-3M3J-WCJ2

OPENSUSE-SU-2022:1059-1

OPENSUSE-SU-2022_1059-1

OPENSUSE-SU-2024:11970-1

PYSEC-2022-173

SUSE-FU-2022:2042-1

SUSE-FU-2022:2135-1

SUSE-RU-2022:1384-1

SUSE-RU-2022:1385-1

SUSE-RU-2022:1389-1

SUSE-RU-2022:1391-1

SUSE-RU-2022:1392-1

SUSE-SU-2022:1049-1

SUSE-SU-2022:1050-1

SUSE-SU-2022:1051-1

SUSE-SU-2022:1057-1

SUSE-SU-2022:1058-1

SUSE-SU-2022:1059-1

SUSE-SU-2022:1060-1

SUSE-SU-2022:1514-1

SUSE-SU-2022:1531-1

SUSE-SU-2022:1536-1

SUSE-SU-2022:1545-1

Affected Products

Alt Linux

Saltstack Salt

Suse

References · 66

• https://osv.dev/vulnerability/SUSE-RU-2022:1389-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22936 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:1057-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1060-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1058-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1049-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1051-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5r3f-3m3j-wcj2 · Vendor Advisory
• https://security.gentoo.org/glsa/202310-22 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2022:1391-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-173 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-22936 · Security Note
• https://osv.dev/vulnerability/SUSE-RU-2022:1392-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-FU-2022:2042-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2022:1385-1 · Vendor Advisory