CVE-2022-22936

HIGH8.8EPSS 0.11%

SaltStack Salt Authentication Bypass by Capture-replay

發布日:2022/3/30修改日:2024/10/22

也稱為:GHSA-5r3f-3m3j-wcj2PYSEC-2022-173

描述

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A sufficient craft attacker could gain root access on minion under certain scenarios.

受影響套件(2)

PyPI/saltfrom 0, < 3002.8
PyPI/saltfrom 0, < 3002.8

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH8.8	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

參考連結(13)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-22936
ADVISORYhttps://saltproject.io/security_announcements/salt-security-advisory-release/,
PATCHhttps://github.com/saltstack/salt
WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml
WEBhttps://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
WEBhttps://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
WEBhttps://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
WEBhttps://github.com/saltstack/salt/releases
WEBhttps://github.com/saltstack/salt/releases,
WEBhttps://repo.saltproject.io
WEBhttps://repo.saltproject.io/
WEBhttps://saltproject.io/security_announcements/salt-security-advisory-release
WEBhttps://security.gentoo.org/glsa/202310-22