CVE-2022-22934

—

CVSS 3.1

8.8 high

EPSS

<1%p57

Published

Mar 29, 2022 (Mar 29, 2022)

Modified

Jun 17, 2026

Description

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.

Vendors: saltstack
Products: salt
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.