CVE-2022-22935: PYSEC-2022-172 - An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a M

CVE-2022-22935 · Severity: low · CVSS 3.1 · Published 2022-03-29

Technologies: salt (PyPI). Vendors: PyPI.

Executive brief

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.

Affected products

PyPI salt

Related threats

PYSEC-2026-1894 - Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload
PYSEC-2026-1902 - Salt Authentication Protocol Version Downgrade Allows Minion Impersonation
PYSEC-2026-1896 - Salt's worker process vulnerable to denial of service through file read operation
PYSEC-2026-1895 - Salt's file contents overwrite the VirtKey class
PYSEC-2026-1898 - Salt's on demand pillar functionality vulnerable to arbitrary command injections