PT-2017-7315 · Saltstack+2 · Salt+2

CVE-2015-8034 · Publicado 2016-02-29 · Atualizado 2026-04-07

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Salt versions prior to 2015.8.3

Description The issue concerns the state.sls function in Salt, which uses weak permissions on the cache data. This allows local users to obtain sensitive information by reading the file.

Recommendations For versions prior to 2015.8.3, update to version 2015.8.3 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2016-1175

CVE-2015-8034

GHSA-6PRW-8XHM-H247

PYSEC-2017-32

SUSE-SU-2016:1895-1

SUSE-SU-2016:1896-1

SUSE-SU-2016:1897-1

USN-8153-1

Produtos afetados

Alt Linux

Salt

Ubuntu

Referências · 25

• https://github.com/saltstack/salt · Nota
• https://github.com/saltstack/salt/issues/28455 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-32.yaml · Nota
• https://github.com/advisories/GHSA-6prw-8xhm-h247 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20161897-1 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20161896-1 · Nota
• https://web.archive.org/web/20200227192308/http://securityfocus.com/bid/96390 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20161895-1 · Nota
• https://cve.org/CVERecord?id=CVE-2015-8034 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-8153-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-6prw-8xhm-h247 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-8034 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2016:1896-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8034 · Nota de Segurança
• https://bugzilla.suse.com/957914 · Nota