PyPI/salt CVE-2022-22936: unknown, EPSS 0.83%
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying
Action: Upgrade salt to 3002.8 or later.
pip install salt==3002.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3002.8 | - |
Fixed versions
| 3002.8 |
Sources
- osv: PYSEC-2022-173
- https://github.com/saltstack/salt/releases,
- https://repo.saltproject.io/
- https://saltproject.io/security_announcements/salt-security-advisory-release/,
- https://github.com/advisories/GHSA-5r3f-3m3j-wcj2
CVE-2022-22936 · published · modified · JSON