SaltStack Salt Insecure Temporary File Creation
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-3563US | high7.2 | — | ||
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1)… | ||||
02
references
External citations — patches, advisories, analysis.
- http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.htmlWEB
- http://seclists.org/oss-sec/2014/q3/428WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95392WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2014-18.yamlWEB
- https://github.com/saltstack/saltPACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2014-3563ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan