CVE-2015-1838

Name of the Vulnerable Software and Affected Versions SaltStack versions prior to 2014.7.4

Description The issue is related to the modules/serverdensity device.py module in SaltStack, which does not properly handle files in the /tmp directory. This can be exploited to gain unauthorized access to confidential data, cause a denial of service, or impact data integrity.

Recommendations For versions prior to 2014.7.4, update to version 2014.7.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /tmp directory to minimize the risk of exploitation.