// For flags

CVE-2022-22967

Gentoo Linux Security Advisory 202310-22

Severity Score

8.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.

Se ha detectado un problema en SaltStack Salt en versiones anteriores a 3002.9, 3003.5, 3004.2. PAM auth falla al rechazar cuentas bloqueadas, lo que permite que un usuario previamente autorizado cuya cuenta está bloqueada siga ejecutando comandos de Salt cuando su cuenta está bloqueada. Esto afecta tanto a las cuentas locales de shell con una sesión activa como a usuarios de salt-api que son autenticados por medio de PAM eauth

Multiple vulnerabilities have been discovered in Salt, the worst of which could result in local privilege escalation. Versions greater than or equal to 3004.2 are affected.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-01-10 CVE Reserved
  • 2022-06-22 CVE Published
  • 2024-08-03 CVE Updated
  • 2025-04-01 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-863: Incorrect Authorization
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Saltstack
Search vendor "Saltstack"
 Salt
Search vendor "Saltstack" for product "Salt"
 < 3002.9
Search vendor "Saltstack" for product "Salt" and version " < 3002.9"
-
Affected
Saltstack
Search vendor "Saltstack"
 Salt
Search vendor "Saltstack" for product "Salt"
 >= 3003 < 3003.5
Search vendor "Saltstack" for product "Salt" and version " >= 3003 < 3003.5"
-
Affected
Saltstack
Search vendor "Saltstack"
 Salt
Search vendor "Saltstack" for product "Salt"
 >= 3004 < 3004.2
Search vendor "Saltstack" for product "Salt" and version " >= 3004 < 3004.2"
-
Affected