CVE-2022-22935: SaltStack Salt

Low severity, CVSS 3.7. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.

Affected products

• SaltStack Salt: from 3002, before 3002.8 (fixed in 3002.8); from 3003, before 3003.4 (fixed in 3003.4); from 3004, before 3004.1 (fixed in 3004.1)

Published 2022-03-29. Last modified 2026-06-17.