Not rated
CVE-2022-22934 An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1
Description
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Saltstack Salt | Versions not published |
References
- saltproject.io saltproject.io
- github.com github.com
- repo.saltproject.io repo.saltproject.io
- GLSA-202310-22 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of Saltstack Salt
The 7 CVEs of Saltstack Salt →
CVE-2022-22967
An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2
8.8
High
CVE-2022-22935
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1
3.7
Low
CVE-2022-22936
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1
8.8
High
CVE-2022-22941
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1
8.8
High