Salt uses weak permissions on the cache data
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-8034US | low3.3 | — | ||
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.htmlWEB
- https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-32.yamlWEB
- https://github.com/saltstack/saltPACKAGE
- https://github.com/saltstack/salt/issues/28455WEB
- https://nvd.nist.gov/vuln/detail/CVE-2015-8034ADVISORY
- https://web.archive.org/web/20200227192308/http://www.securityfocus.com/bid/96390WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan