CVSS 3.1
3.7 lowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LCVE-2022-22935
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- saltstack:salt
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cvcc-5x92-gmhc | PyPI | salt | <3002.8 | 3002.8 |
| GHSA-cvcc-5x92-gmhc | PyPI | salt | >=3003 <3003.4 | 3003.4 |
| GHSA-cvcc-5x92-gmhc | PyPI | salt | >=3004 <3004.1 | 3004.1 |
| PYSEC-2022-172 | PyPI | salt | <3002.8 | 3002.8 |