Man-in-the-Middle (MitM)

🗓️ 30 Mar 2022 13:00:07Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 5 Views

Salt is vulnerable to man-in-the-middle attacks due to unsigned pillar data.

Reporter	Title	Published	Views	Family All 77
ATTACKERKB	CVE-2022-22934	29 Mar 202217:15	–	attackerkb
AlpineLinux	CVE-2022-22934	29 Mar 202200:00	–	alpinelinux
Circl	CVE-2022-22934	29 Mar 202220:11	–	circl
CNNVD	SaltStack Salt 安全漏洞	29 Mar 202200:00	–	cnnvd
CVE	CVE-2022-22934	29 Mar 202200:00	–	cve
Cvelist	CVE-2022-22934	29 Mar 202200:00	–	cvelist
Debian CVE	CVE-2022-22934	29 Mar 202200:00	–	debiancve
Tenable Nessus	GLSA-202310-22 : Salt: Multiple Vulnerabilities	31 Oct 202300:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : salt (openSUSE-SU-2022:1059-1)	1 Apr 202200:00	–	nessus
Tenable Nessus	SaltStack 3000 < 3002.8 / 3003 < 3003.4 / 3004 < 3004.1 Multiple Vulnerabilities	5 Apr 202200:00	–	nessus

Vulners

Node

saltstack saltMatch2019.2.3-r0python

AND

saltstack saltMatch3003.2-r0python

AND

saltstack saltMatch3002.2-r0python

AND

saltstack saltMatch3003.1-r0python

AND

saltstack saltMatch3002.5-r0python

AND

saltstack saltMatch3000.3-r0python

AND

saltstack saltMatch3003.3-r0python

AND

saltstack saltMatch3002.6-r0python

AND

saltstack saltMatch3004-r1python

AND

saltstack saltMatch3000.1-r1python

AND

saltstack saltMatch3004-r0python

AND

saltstack saltMatch3000.1-r0python

AND

saltstack saltMatch3004-r2python

AND

saltstack saltMatch3000.2-r0python

AND

saltstack saltMatch3000.1-r2python

AND

saltstack saltMatch3003-r1python

AND

saltstack saltMatch3003-r0python

AND

alpinelinux alpine_linuxMatchedge

saltstack saltRange2019.2.3–3002.7python

saltstack saltRange3003rc1–3003.3python

saltstack saltRange3004rc1–3004python

Source	Link
saltproject	www.saltproject.io/security_announcements/salt-security-advisory-release/
github	www.github.com/saltstack/salt/commit/5fb064f27babc5773c551e9eda040f5bf51fc7cc
github	www.github.com/advisories/GHSA-2q4g-wfm6-5fpm
github	www.github.com/saltstack/salt/commit/836789a88156bb19fdac3fa00139cd278f92418c
security	www.security.gentoo.org/glsa/202310-22
github	www.github.com/saltstack/salt/releases,
github	www.github.com/saltstack/salt/releases%2C
repo	www.repo.saltproject.io/
saltproject	www.saltproject.io/security_announcements/salt-security-advisory-release/,
saltproject	www.saltproject.io/security_announcements/salt-security-advisory-release/%2C

21 Dec 2023 19:27Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25.8

CVSS 3.18.8

EPSS0.0012