PT-2022-15745 · Saltstack+2 · Saltstack Salt+2
Published
2022-03-29
·
Updated
2023-12-21
·
CVE-2022-22941
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SaltStack Salt versions prior to 3002.8
SaltStack Salt versions prior to 3003.4
SaltStack Salt versions prior to 3004.1
Description
An issue was discovered in SaltStack Salt when configured as a Master-of-Masters with a publisher acl. If a user configured in the publisher acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid. This allows configured users to target any of the minions connected to the syndic with their configured commands, effectively bypassing permissions and publishing authorized commands to any configured minion.
Recommendations
For versions prior to 3002.8, update to version 3002.8 or later.
For versions prior to 3003.4, update to version 3003.4 or later.
For versions prior to 3004.1, update to version 3004.1 or later.
As a temporary workaround, consider restricting access to the publisher acl and syndic master configurations to minimize the risk of exploitation.
Fix
Incorrect Permission
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Saltstack Salt
Suse