// For flags

CVE-2022-22936

 

Severity Score

8.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A sufficient craft attacker could gain root access on minion under certain scenarios.

Se ha detectado un problema en SaltStack Salt en versiones anteriores a 3002.8, 3003.4, 3004.1. Las publicaciones de trabajos y las respuestas del servidor de archivos son susceptibles de ataques de repetición, lo que puede resultar en que un atacante reproduzca las publicaciones de trabajos causando que los minions ejecuten trabajos antiguos. Las respuestas del servidor de archivos también pueden ser reproducidas. Un atacante suficientemente diseñado podría conseguir acceso root en el minion bajo determinados escenarios

*Credits: N/A
CVSS Scores
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Adjacent
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-01-10 CVE Reserved
  • 2022-03-29 CVE Published
  • 2024-08-03 CVE Updated
  • 2024-11-02 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-294: Authentication Bypass by Capture-replay
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Saltstack
Search vendor "Saltstack"
 Salt
Search vendor "Saltstack" for product "Salt"
 >= 3002 < 3002.8
Search vendor "Saltstack" for product "Salt" and version " >= 3002 < 3002.8"
-
Affected
Saltstack
Search vendor "Saltstack"
 Salt
Search vendor "Saltstack" for product "Salt"
 >= 3003 < 3003.4
Search vendor "Saltstack" for product "Salt" and version " >= 3003 < 3003.4"
-
Affected
Saltstack
Search vendor "Saltstack"
 Salt
Search vendor "Saltstack" for product "Salt"
 >= 3004 < 3004.1
Search vendor "Saltstack" for product "Salt" and version " >= 3004 < 3004.1"
-
Affected