CVE-2022-22935: SaltStack Salt Improper Authentication via Man in the Middle Attack
3.7
CVSS Score
3.1
Basic Information
CVE ID
GHSA ID
EPSS Score
0.18494%
CWE
Published
3/30/2022
Updated
10/22/2024
KEV Status
No
Technology
Python
PythonTechnical Details
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| salt | pip | < 3002.8 | 3002.8 |
| salt | pip | >= 3003, < 3003.4 | 3003.4 |
| salt | pip | >= 3004, < 3004.1 | 3004.1 |
Vulnerability Intelligence
Miggo AI
Miggo AIRoot Cause Analysis
The vulnerability stems from insufficient authentication in the minion-master handshake. Release notes explicitly mention adding signatures to authentication replies to mitigate MiTM attacks. The core issue would exist in functions handling authentication responses:
- Network-layer authentication processing (ZeroMQ channel)
- Cryptographic verification routines These components would be responsible for unsigned/improperly verified master responses in vulnerable versions. The high confidence comes from the explicit documentation of the security fix pattern (adding message signing) and Salt's known architecture.