CVE-2022-22941: High severity SaltStack Salt vulnerability
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisheracl, if a user configured in the publisheracl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisheracl configured on the Master-of-Masters, allowing users specified in the publisheracl to bypass permissions, publishing authorized commands to any configured minion.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/saltto a version that resolves this vulnerability.Fixed in 3002.8 - Upgrade
Upgrade
pip/saltto a version that resolves this vulnerability.Fixed in 3004.1 - Upgrade
Upgrade
pip/saltto a version that resolves this vulnerability.Fixed in 3003.4 - Upgrade
Upgrade
alpine/saltto a version that resolves this vulnerability.Fixed in 3004.1-r0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3004.1Fixed in 3003.4Fixed in 3002.8 - Upgrade
Upgrade
SaltStack Saltto a version that resolves this vulnerability.Fixed in 3002.8 - Upgrade
Upgrade
SaltStack Saltto a version that resolves this vulnerability.Fixed in 3003.4 - Upgrade
Upgrade
SaltStack Saltto a version that resolves this vulnerability.Fixed in 3004.1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2022-22941?
CVE-2022-22941 is a vulnerability found in SaltStack Salt before version 3002.8, 3003.4, and 3004.1 that allows an attacker to target minions connected to the Syndic when configured as a Master-of-Masters with a publisher_acl.
How severe is CVE-2022-22941?
CVE-2022-22941 has a severity level of 8.8 (high).
How can I fix CVE-2022-22941?
To fix CVE-2022-22941, upgrade SaltStack Salt to version 3002.8, 3003.4, or 3004.1.
Where can I find more information about CVE-2022-22941?
You can find more information about CVE-2022-22941 on the SaltStack Salt GitHub releases page, SaltStack repository, and SaltStack security advisory release page.
What is CWE-732?
CWE-732 is a specific weakness category that refers to incorrect interpretation of a security-sensitive feature or behavior.