{"id":"CVE-2022-22967","aliases":["EUVD-2022-0274","GHSA-fpxm-fprw-6hxj","PYSEC-2022-210","SUSE-SU-2022:2154-1","SUSE-SU-2022:2159-1","SUSE-SU-2022:2178-1","SUSE-SU-2022:2178-2","SUSE-SU-2022:2253-1","SUSE-SU-2022:2278-1","SUSE-SU-2022:2304-1","SUSE-SU-2022:3172-1","SUSE-SU-2022:3177-1","UBUNTU-CVE-2022-22967","openSUSE-SU-2024:12154-1"],"status":"published","title":"Salt's PAM auth fails to reject locked accounts","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02062,"percentile":0.81489,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2022-06-22T00:00:00Z","modified":"2026-10-28T02:30:37Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["3002.9","3003.5","3004.2"],"sources":["ghsa","osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"salt","fixed_in":["3000-65.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"salt","fixed_in":["3000-65.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"salt","fixed_in":["3004-150100.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"salt","fixed_in":["3004-150100.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"salt","fixed_in":["3004-150100.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"salt","fixed_in":["3004-150100.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"salt","fixed_in":["3004-150100.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"salt","fixed_in":["3004-150100.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"salt","fixed_in":["3004-150300.53.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"salt","fixed_in":["3004-150300.53.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP3","package":"salt","fixed_in":["3004-150300.53.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"salt","fixed_in":["3004-150300.53.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","fixed_in":["3004-150300.53.24.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"salt","fixed_in":["3004-150300.53.24.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"salt","fixed_in":["3004-150300.53.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"salt","fixed_in":["3004-150000.8.41.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"salt","fixed_in":["3004-150000.8.41.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"salt","fixed_in":["3004-150000.8.41.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"salt","fixed_in":["3004-150000.8.41.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"salt","fixed_in":["3004-150200.72.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"salt","fixed_in":["3004-150400.8.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"salt","fixed_in":["3004-150400.8.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP4","package":"salt","fixed_in":["3004-150400.8.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"salt","fixed_in":["3004-150400.8.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","fixed_in":["3004-150000.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.3","package":"venv-salt-minion","fixed_in":["3004-150000.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"venv-salt-minion","fixed_in":["3004-150000.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","fixed_in":["3004-3.11.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3002.9"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3003.0"},{"fixed":"3003.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3004.0"},{"fixed":"3004.2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3002.9"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002rc1"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3003.0"},{"fixed":"3003.5"}]}],"versions":["3003","3003.1","3003.2","3003.3","3003.4"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3004.0"},{"fixed":"3004.2"}]}],"versions":["3004","3004.1"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3002.9"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002rc1"]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-65.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000-65.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150100.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150100.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150100.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150100.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150100.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150100.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150300.53.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150300.53.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150300.53.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150300.53.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150300.53.24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150300.53.24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150300.53.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150000.8.41.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150000.8.41.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150000.8.41.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150000.8.41.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150200.72.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150400.8.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150400.8.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150400.8.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150400.8.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150000.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150000.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-150000.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3004-3.11.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.0-1","0.16.4-2","0.17.1+dfsg-1","0.17.2-1","0.17.2-2","0.17.2-3","0.17.4-1","0.17.4-2","0.17.5-1","0.17.5+ds-1","0.17.5+ds-1ubuntu0.1~esm1","0.17.5+ds-1ubuntu0.1~esm2","0.17.5+ds-1ubuntu0.1~esm4","0.17.5+ds-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1","2015.8.8+ds-1ubuntu0.1+esm1","2015.8.8+ds-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2016.11.5+ds-1","2016.11.8+dfsg1-1","2017.7.2+dfsg1-2ubuntu1","2017.7.3+dfsg1-1","2017.7.4+dfsg1-1","2017.7.4+dfsg1-1ubuntu18.04.1","2017.7.4+dfsg1-1ubuntu18.04.2","2017.7.4+dfsg1-1ubuntu18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3002.6+dfsg1-4","3002.7+dfsg1-1","3004+dfsg1-4","3004+dfsg1-5","3004+dfsg1-6ubuntu1","3004+dfsg1-7","3004+dfsg1-8","3004.1+dfsg-2"]}],"products":[{"vendor":"saltstack","product":"salt"},{"vendor":"saltstack","product":"saltstack salt"}],"references":[{"url":"https://repo.saltproject.io/","tags":["x_transferred","Product","Vendor Advisory","web"]},{"url":"https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/%2C","tags":["x_transferred","Broken Link","advisory"]},{"url":"https://security.gentoo.org/glsa/202310-22","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22967","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml","tags":["web"]},{"url":"https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/,","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-fpxm-fprw-6hxj","tags":["advisory"]},{"url":"https://repo.saltproject.io","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/22xxx/CVE-2022-22967.json","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222154-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200566","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22967","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222159-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222178-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222178-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222253-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222278-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222304-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223172-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1195895","tags":["report"]},{"url":"https://bugzilla.suse.com/1197288","tags":["report"]},{"url":"https://bugzilla.suse.com/1198489","tags":["report"]},{"url":"https://bugzilla.suse.com/1198744","tags":["report"]},{"url":"https://bugzilla.suse.com/1199372","tags":["report"]},{"url":"https://bugzilla.suse.com/1201082","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223177-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-22967","tags":["report"]},{"url":"https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22967","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-22967","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","status":"published","published":"2022-06-22T00:00:00Z","modified":"2025-05-05T16:28:14.931Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:34:26.645563Z"}],"euvd":[{"id":"EUVD-2022-0274","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","status":"published","published":"2022-06-22T00:00:00Z","modified":"2025-05-05T16:28:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:56.549702Z"}],"ghsa":[{"id":"GHSA-fpxm-fprw-6hxj","title":"Salt's PAM auth fails to reject locked accounts","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","status":"published","published":"2022-06-25T07:21:19Z","modified":"2024-10-26T22:51:49Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:38:13.90937Z"}],"nvd":[{"id":"CVE-2022-22967","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","status":"published","published":"2022-06-23T17:15:12.08Z","modified":"2026-06-17T04:29:15.923Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:07:22.613788Z"}],"osv":[{"id":"CVE-2022-22967","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","status":"published","published":"2022-06-22T00:00:00Z","modified":"2026-10-28T02:30:37.784308551Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:24.061177Z"},{"id":"GHSA-fpxm-fprw-6hxj","title":"Salt's PAM auth fails to reject locked accounts","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","status":"published","published":"2022-06-25T07:21:19Z","modified":"2024-10-26T23:28:30.327309Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:46:46.760785Z"},{"id":"UBUNTU-CVE-2022-22967","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","status":"published","published":"2022-06-23T17:15:00Z","modified":"2026-04-08T13:47:48.83522Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"openSUSE-SU-2024:12154-1","title":"python3-salt-3004-7.1 on GA media","description":"These are all security issues fixed in the python3-salt-3004-7.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:01:09.840397Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"PYSEC-2022-210","description":"An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.","status":"published","published":"2022-06-23T17:15:00Z","modified":"2023-11-08T04:08:15.057201Z","updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"SUSE-SU-2022:2154-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could lead to authentication bypass when using PAM (bsc#1200566)\n","status":"published","published":"2022-06-22T12:53:55Z","modified":"2026-02-04T03:26:15.170648Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2159-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566)\n","status":"published","published":"2022-06-23T08:04:24Z","modified":"2026-02-04T02:18:49.268681Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2178-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass PAM authentication (bsc#1200566)\n","status":"published","published":"2022-06-24T12:04:39Z","modified":"2026-02-04T04:37:45.236393Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2178-2","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass PAM authentication (bsc#1200566)\n","status":"published","published":"2022-06-24T12:04:50Z","modified":"2025-05-02T04:32:45.023598Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2253-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566) \n","status":"published","published":"2022-07-04T10:06:16Z","modified":"2026-02-04T02:37:49.487127Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2278-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could by used to bypass authentication when using PAM (bsc#1200566)\n","status":"published","published":"2022-07-06T07:34:12Z","modified":"2026-02-04T03:01:22.824956Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2304-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566)\n","status":"published","published":"2022-07-06T11:38:33Z","modified":"2026-02-04T03:59:09.969881Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3172-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Add support for gpgautoimport in zypperpkg module\n- Update Salt to work with Jinja \u003e= and \u003c= 3.1.0 (bsc#1198744)\n- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)\n- Make Salt 3004 compatible with pyzmq \u003e= 23.0.0 (bsc#1201082)\n- Add support for name, pkgs and diff_attr parameters to upgrade\n  function for zypper and yum (bsc#1198489)\n- Fix possible errors on running post install script\n  if semanage is present on the system, but SELinux is not configured\n- Remove unused imports in the venv wrappers\n- Set VENV_PIP_TARGET to /var/lib/venv-salt-minion/local\n  to force PIP use it as the destination to install modules\n- Fix ownership of salt thin directory when using the Salt Bundle\n- Set default target for pip from VENV_PIP_TARGET environment variable\n- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)\n- Save log to logfile with docker.build\n- Use Salt Bundle in dockermod\n- Ignore errors on reading license files with dpkg_lowpkg (bsc#1197288)\n- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)\n\n","status":"published","published":"2022-09-08T07:29:45Z","modified":"2026-02-04T03:10:04.397358Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3177-1","title":"Security update for SUSE Manager Salt Bundle","description":"\nThis update fixes the following issues:\n\nvenv-salt-minion:\n\n- Add support for gpgautoimport in zypperpkg module\n- Update Salt to work with Jinja \u003e= and \u003c= 3.1.0 (bsc#1198744)\n- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)\n- Make Salt 3004 compatible with pyzmq \u003e= 23.0.0 (bsc#1201082)\n- Add support for name, pkgs and diff_attr parameters to upgrade\n  function for zypper and yum (bsc#1198489)\n- Fix possible errors on running post install script\n  if semanage is present on the system, but SELinux is not configured\n- Remove unused imports in the venv wrappers\n- Set VENV_PIP_TARGET to /var/lib/venv-salt-minion/local\n  to force PIP use it as the destination to install modules\n- Fix ownership of salt thin directory when using the Salt Bundle\n- Set default target for pip from VENV_PIP_TARGET environment variable\n- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)\n- Save log to logfile with docker.build\n- Use Salt Bundle in dockermod\n- Ignore errors on reading license files with dpkg_lowpkg (bsc#1197288)\n- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)\n\n","status":"published","published":"2022-09-08T07:32:06Z","modified":"2026-02-04T03:36:50.547111Z","updated_at":"2026-11-02T15:53:50.965375Z"}]}}