Advisory ROSA-SA-2023-2195

software: salt 3004.2
WASP: ROSA-CHROME

package_evr_string: salt-3004.2-1.src.rpm

CVE-ID: CVE-2022-22967
BDU-ID: 2022-03745
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the PAM auth function of the Salt configuration management and remote operations execution system is related to the lack of a valid “locked accounts” lockout. Exploitation of the vulnerability allows an attacker acting remotely to execute arbitrary commands
CVE-STATUS: Fixed
CVE-REV: To close, execute the command: sudo dnf update salt