DeutschShown in its original language — a full translation is planned for a future version.
SaltStack Salt: Mehrere Schwachstellen
view advisory published 2022-03-29
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen, Privilegien zu erweitern oder beliebigen Programmcode auszuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22941US | high8.8 | — | ||
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publi… | ||||
| CVE-2022-22936US | high8.8OT elevated | — | ||
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an… | ||||
| CVE-2022-22935US | low3.7 | — | ||
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process t… | ||||
| CVE-2022-22934US | high8.8 | — | ||
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attacker… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2022:1060-1 vom 2022-03-30external
- SUSE Security Update SUSE-SU-2022:1057-1 vom 2022-03-30external
- SUSE Security Update SUSE-SU-2022:1059-1 vom 2022-03-30external
- SUSE Security Update SUSE-SU-2022:1056-1 vom 2022-03-30external
- SUSE Security Update SUSE-SU-2022:1049-1 vom 2022-03-30external
- SUSE Security Update SUSE-SU-2022:1058-1 vom 2022-03-30external
- SUSE Security Update SUSE-SU-2022:1050-1 vom 2022-03-30external
- SUSE Security Update SUSE-SU-2022:14932-1 vom 2022-03-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan