Salt Authentication Protocol Downgrade Vulnerability Allowing Minion Impersonation

A vulnerability exists in Salt that allows a malicious minion to downgrade the authentication protocol and bypass newer security features. This is achieved by using an older request payload format, which can enable minion impersonation and circumvent protections that were introduced to address previous issues. The vulnerability affects Salt versions prior to 3006.17.

Impact

Exploitation of this vulnerability could lead to unauthorized minion impersonation, allowing a malicious minion to bypass security features and potentially manipulate or interfere with the Salt master or other minions.

Remediation

Users can upgrade to Salt version 3006.17 or later, where this vulnerability has been fixed. Instructions for upgrading can be found in the Salt User Guide.