Salt Project PKI Authentication Bypass Vulnerability in the Auth Module

A vulnerability exists in the Salt Project's authentication module for public key infrastructure (PKI) management. The issue arises because the module fails to properly authenticate callers. Instead of requiring access to a private key for validation, the module accepts authentication attempts based solely on a public certificate, which is checked against a certificate authority (CA) certificate. This flaw allows for improper authentication in PKI-related operations.

Impact

Exploitation of this vulnerability could lead to unauthorized authentication in PKI operations, potentially allowing a caller to impersonate another entity without proper validation.

Remediation

Users can upgrade to Salt versions 3007.4 or 3006.12, both of which include the necessary fix for this vulnerability.