VULNERABILITY INTELLIGENCE

CVE-2022-22934

CVSS score8.8 HIGH
EPSS probability0.88%
CISA KEVNot currently listed
Published2022-03-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references