Arbitrary Pillar Data Substitution in SaltStack Salt (CVE-2022-22934)
Summary
CVE-2022-22934: An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Affects salt versions >= 998c382f5f2c3b4cbf7d96aa6913ada6993909b3, < 836789a88156bb19fdac3fa00139cd278f92418c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SaltStack Salt is an open-source configuration management and remote execution software. It is used for managing and automating the configuration of servers and network devices. Salt Masters in versions before 3002.8, 3003.4, and 3004.1 do not sign pillar data with the minion's public key, which can lead to attackers substituting arbitrary pillar data.
Vulnerability Detail
The vulnerability (CVE-2022-22934) in SaltStack Salt allows attackers to replace legitimate pillar data with arbitrary data. This can result in unauthorized access, privilege escalation, and potential compromise of the Salt Master. The issue arises from the lack of proper signing of pillar data with the minion's public key.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can manually sign the pillar data with the minion's public key before sending it to the Salt Master. This can be achieved by implementing custom code or scripts to ensure the integrity and authenticity of the pillar data.
Conclusion
In conclusion, the vulnerability (CVE-2022-22934) in SaltStack Salt allows for arbitrary substitution of pillar data, potentially leading to unauthorized access and compromise of the Salt Master. It is crucial to upgrade to the recommended versions or implement the provided workaround to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for salt →
FAQ
SaltStack Salt is an open-source configuration management and remote execution software used for managing and automating the configuration of servers and network devices.
This vulnerability allows attackers to substitute arbitrary pillar data, potentially leading to unauthorized access, privilege escalation, and compromise of the Salt Master.
Versions before 3002.8, 3003.4, and 3004.1 of SaltStack Salt are affected by this vulnerability.
To fix this vulnerability, it is recommended to upgrade SaltStack Salt to version 3002.8, 3003.4, or 3004.1.
Yes, a workaround is available. Users can manually sign the pillar data with the minion's public key before sending it to the Salt Master.
Related vulnerabilities
Recent vulnerabilities recorded for salt.
