CVE-2022-22935

2022-03-2900:00:00

vmware

www.cve.org

saltstack

authentication

denial of service

mitm

minion

impersonating master

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

46.3%

JSON

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "SaltStack Salt",
    "versions": [
      {
        "version": "SaltStack Salt prior to 3002.8, 3003.4, 3004.1",
        "status": "affected"
      }
    ]
  }
]