CVE-2022-22941

Description

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.019

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-22934,CVE-2022-22935,CVE-2022-22936,CVE-2022-22941 are affected in VMware SALT *	Windows
Vulnerabilities CVE-2022-22934,CVE-2022-22935,CVE-2022-22936,CVE-2022-22941 are affected in VMware SALT 3002.5	Windows
Vulnerabilities CVE-2022-22934,CVE-2022-22935,CVE-2022-22936,CVE-2022-22941 are fixed in Python-salt 3002.8	Windows
Vulnerabilities CVE-2022-22934,CVE-2022-22935,CVE-2022-22936,CVE-2022-22941 are fixed in Python-salt 3003.4	Windows
Vulnerabilities CVE-2022-22934,CVE-2022-22935,CVE-2022-22936,CVE-2022-22941 are fixed in Python-salt 3004.1	Windows
Vulnerabilities CVE-2022-22934,CVE-2022-22935,CVE-2022-22936,CVE-2022-22941 are fixed in Python-salt for linux 3002.8	Linux
Vulnerabilities CVE-2022-22934,CVE-2022-22935,CVE-2022-22936,CVE-2022-22941 are fixed in Python-salt for linux 3003.4	Linux
Vulnerabilities CVE-2022-22934,CVE-2022-22935,CVE-2022-22936,CVE-2022-22941 are fixed in Python-salt for linux 3004.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234