Replay Attack Vulnerability in SaltStack Salt Software

CVE-2022-22936

What is CVE-2022-22936?

An issue has been identified in SaltStack Salt prior to specified versions that makes job publishes and file server replies vulnerable to replay attacks. This vulnerability enables attackers to resend job publishes, potentially causing minions to execute outdated jobs. In certain scenarios, such manipulations may give a skilled attacker root-level access to the minions. Awareness and immediate action are essential for securing systems affected by this vulnerability.

References