PT-2017-6526

CVE-2015-1839

Published

2015-02-02

Updated

2022-05-17

CVSS 3.1

5.3

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SaltStack versions prior to 2014.7.4

Description The issue arises from improper handling of files in /tmp by the modules/chef.py module in SaltStack.

Recommendations For versions prior to 2014.7.4, update to version 2014.7.4 or later to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-6GRP-75PQ-C8CJ

ALT-PU-2015-1126

PYSEC-2017-30

Found an issue in the description? Have something to add? Feel free to write us 👾