An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A sufficient craft attacker could gain root access on minion under certain scenarios.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade salt | Aug 22, 2024 | Mar 29, 2022 |
| Gentoo Linux | — | Upgrade app-admin/salt. | Nov 1, 2023 | Mar 29, 2022 |
| Suse | — | Upgrade salt-transactional-updateUpgrade salt-cloudUpgrade salt-fish-completionUpgrade salt-zsh-completionUpgrade salt-bash-completionUpgrade python3-saltUpgrade python2-saltUpgrade salt-proxyUpgrade salt-apiUpgrade saltUpgrade salt-docUpgrade salt-syndicUpgrade salt-standalone-formulas-configurationUpgrade salt-sshUpgrade salt-minionUpgrade salt-master | Oct 26, 2022 | Mar 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub