CVE-2022-26810

Technical details about CVE-2022-26810 are not provided in the supplied connected documents. No explicit affected products/versions, root cause, or fixes are described here. Monitor for updates from official sources.

CVE-2022-26827: Concurrent Execution using Shared Resource with Improper Synchronization

Windows File Server Resource Management Service Elevation of Privilege Vulnerability...

CVE-2022-26810: Undefined Security Weakness

Windows File Server Resource Management Service Elevation of Privilege Vulnerability...

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

...

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

...

PT-2022-2875 · Microsoft · Windows File Server Resource Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows File Server Resource Management Service affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows File Server Resource Management Service. This can allow an...

Microsoft Windows File Server Permission Licensing and Access Control Vulnerabilities

Microsoft Windows File Server is a server role from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows File Server with privilege permission and access control issues. The following products and editions are affected: Windows 10 Version 1909 for x64-based Systems,Windows 10...

PT-2022-2772 · Microsoft · Windows File Server Resource Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows File Server Resource Management Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows File Server Resource Management Service, which can be exploited to elevate...

Microsoft Windows File Server race condition issue vulnerability

Microsoft Windows File Server is a server role of Microsoft Corporation USA. Microsoft Windows File Server is vulnerable to a competitive conditions issue. The following products and editions are affected:Windows 10 Version 1909 for x64-based Systems,Windows 10 Version 1909 for ARM64-based...

SaltStack 3000 < 3002.8 / 3003 < 3003.4 / 3004 < 3004.1 Multiple Vulnerabilities

According to its self-reported version number, the instance of SaltStack hosted on the remote server is affected by multiple vulnerabilities: - Salt Masters do not sign pillar data with the minion's public key, which can result in attackers substituting arbitrary pillar data. CVE-2022-22934 - Job...

Authentication Bypass

salt is vulnerable to authentication bypass. The vulnerability exists due to improper authentication in job publishes and file server replies which allows an attacker to replay file server replies and gain root access to minion...

SaltStack Salt Authentication Bypass by Capture-replay

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A...

Code injection

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A...

PYSEC-2022-173

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A...

PYSEC-2022-173

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A...

PT-2022-15744 · Saltstack +2 · Saltstack Salt +2

Name of the Vulnerable Software and Affected Versions: SaltStack Salt versions prior to 3002.8 SaltStack Salt versions prior to 3003.4 SaltStack Salt versions prior to 3004.1 Description: An issue was discovered in SaltStack Salt where job publishes and file server replies are susceptible to repl...

CVE-2022-22936: Authentication Bypass by Capture-replay

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A...

CVE-2022-22936

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A...

CVE-2022-22936

Removed by vendor...

CVE-2022-22936

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A...