PT-2017-6526 · Saltstack+1 · Saltstack+1

Michael Scherer · Publicado 2015-02-02 · Atualizado 2022-05-17 · CVE-2015-1839

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SaltStack versions prior to 2014.7.4

Description The issue arises from improper handling of files in /tmp by the modules/chef.py module in SaltStack.

Recommendations For versions prior to 2014.7.4, update to version 2014.7.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

ALT-PU-2015-1126

CVE-2015-1839

GHSA-6GRP-75PQ-C8CJ

PYSEC-2017-30

Produtos afetados

Alt Linux

Saltstack

Referências · 13

• https://github.com/saltstack/salt · Nota
• https://github.com/saltstack/salt/commit/b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81 · Correção
• https://github.com/saltstack/salt/commit/22d2f7a1ec93300c34e8c42d14ec39d51e610b5c · Correção
• https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-30.yaml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1839 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1212788 · Correção
• https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-1839 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1839 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-6grp-75pq-c8cj · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-1839 · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2017-30 · Aviso do Fabricante