{"action":"Upgrade salt to 3002.8 or later.","affected":[{"fixed":"3002.8","introduced":"0"},{"fixed":"3003.4","introduced":"3003"},{"fixed":"3004.1","introduced":"3004"}],"component":"salt","cve_ids":["CVE-2022-22941"],"ecosystem":"PyPI","epss":0.0134,"exploited":false,"fixed_versions":["3002.8","3003.4","3004.1"],"ghsa_id":"GHSA-qcr3-hr2f-6557","id":"tcs_01M5KFVWVCB2PRKFZV358Y79WX","modified_at":"2024-10-22T15:11:34.787109Z","published_at":"2022-03-30T00:00:20Z","references":["https://osv.dev/vulnerability/GHSA-qcr3-hr2f-6557","https://nvd.nist.gov/vuln/detail/CVE-2022-22941","https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml","https://github.com/saltstack/salt","https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31","https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32","https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30","https://repo.saltproject.io","https://security.gentoo.org/glsa/202310-22"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-qcr3-hr2f-6557","url":"https://osv.dev/vulnerability/GHSA-qcr3-hr2f-6557"}],"summary":"SaltStack Salt Permissions Bypass"}