PT-2014-5397 · Saltstack+2 · Saltstack+2

Publicado 2014-08-22 · Atualizado 2022-05-17 · CVE-2014-3563

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Salt (aka SaltStack) versions prior to 2014.1.10

Description The issue is related to temporary file creation and affects local users. It involves vectors related to (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

Recommendations For versions prior to 2014.1.10, update to version 2014.1.10 or later to resolve the issue.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

ALT-PU-2014-2318

CVE-2014-3563

GHSA-MFR3-9CJ8-H2QM

PYSEC-2014-18

USN-4769-1

Produtos afetados

Alt Linux

Saltstack

Ubuntu

Referências · 24

• https://github.com/saltstack/salt · Nota
• https://github.com/saltstack/salt/commit/2b8953adcbf1527bb330b12c9d59f1753ecaf78d · Nota
• https://github.com/saltstack/salt/commit/7d4c470f91fcb43f505bfd220605fede1041437c · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2014-18.yaml · Nota
• https://ubuntu.com/security/notices/USN-4769-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95392 · Nota
• https://osv.dev/vulnerability/PYSEC-2014-18 · Aviso do Fabricante
• http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-14696 · Aviso do Fabricante
• http://securityfocus.com/bid/69319 · Nota
• https://ubuntu.com/security/CVE-2015-6941 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-14695 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-15751 · Aviso do Fabricante
• http://seclists.org/oss-sec/2014/q3/428 · Correção
• https://ubuntu.com/security/CVE-2015-6918 · Aviso do Fabricante