Minion Authentication Denial of Service in SaltStack Salt Affected by Vendor Vulnerability

CVE-2022-22935

What is CVE-2022-22935?

A vulnerability has been identified in SaltStack Salt that allows a malicious actor to exploit the minion authentication process. This flaw can lead to a denial of service, where an attacker, by impersonating the master, is capable of stopping minion processes. Users are encouraged to upgrade to the latest versions to mitigate this risk and enhance the security of their infrastructure. For additional details on this issue, refer to the Salt Project's security advisories.

References