CVE-2015-8034 Salt uses weak permissions on the cache data
LowCVSS 3.3
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi salt(PyPI) | < 2015.8.3 | 2015.8.3 |
| pypi salt(PyPI) | = 0.10.0 | No fix listed |
| pypi salt(PyPI) | = 0.10.1 | No fix listed |
| pypi salt(PyPI) | = 0.10.2 | No fix listed |
| pypi salt(PyPI) | = 0.10.3 | No fix listed |
| pypi salt(PyPI) | = 0.10.4 | No fix listed |
| pypi salt(PyPI) | = 0.10.5 | No fix listed |
| pypi salt(PyPI) | = 0.11.0 | No fix listed |
| pypi salt(PyPI) | = 0.11.1 | No fix listed |
| pypi salt(PyPI) | = 0.12.0 | No fix listed |
| pypi salt(PyPI) | = 0.12.1 | No fix listed |
| pypi salt(PyPI) | = 0.13.0 | No fix listed |
| pypi salt(PyPI) | = 0.13.1 | No fix listed |
| pypi salt(PyPI) | = 0.13.2 | No fix listed |
| pypi salt(PyPI) | = 0.13.3 | No fix listed |
| pypi salt(PyPI) | = 0.14.0 | No fix listed |
| pypi salt(PyPI) | = 0.14.1 | No fix listed |
| pypi salt(PyPI) | = 0.15.0 | No fix listed |
| pypi salt(PyPI) | = 0.15.1 | No fix listed |
| pypi salt(PyPI) | = 0.15.2 | No fix listed |
| pypi salt(PyPI) | = 0.15.3 | No fix listed |
| pypi salt(PyPI) | = 0.15.90 | No fix listed |
| pypi salt(PyPI) | = 0.16.0 | No fix listed |
| pypi salt(PyPI) | = 0.16.1 | No fix listed |
| pypi salt(PyPI) | = 0.16.2 | No fix listed |
Show 77 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi salt(PyPI) | = 0.16.3 | No fix listed |
| pypi salt(PyPI) | = 0.16.4 | No fix listed |
| pypi salt(PyPI) | = 0.17.0 | No fix listed |
| pypi salt(PyPI) | = 0.17.0rc1 | No fix listed |
| pypi salt(PyPI) | = 0.17.1 | No fix listed |
| pypi salt(PyPI) | = 0.17.2 | No fix listed |
| pypi salt(PyPI) | = 0.17.3 | No fix listed |
| pypi salt(PyPI) | = 0.17.4 | No fix listed |
| pypi salt(PyPI) | = 0.17.5 | No fix listed |
| pypi salt(PyPI) | = 0.8.7 | No fix listed |
| pypi salt(PyPI) | = 0.8.9 | No fix listed |
| pypi salt(PyPI) | = 0.9.0 | No fix listed |
| pypi salt(PyPI) | = 0.9.1 | No fix listed |
| pypi salt(PyPI) | = 0.9.2 | No fix listed |
| pypi salt(PyPI) | = 0.9.3 | No fix listed |
| pypi salt(PyPI) | = 0.9.4 | No fix listed |
| pypi salt(PyPI) | = 0.9.5 | No fix listed |
| pypi salt(PyPI) | = 0.9.6 | No fix listed |
| pypi salt(PyPI) | = 0.9.7 | No fix listed |
| pypi salt(PyPI) | = 0.9.8 | No fix listed |
| pypi salt(PyPI) | = 0.9.9 | No fix listed |
| pypi salt(PyPI) | = 0.9.9.1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc2 | No fix listed |
| pypi salt(PyPI) | = 2014.1.0rc3 | No fix listed |
| pypi salt(PyPI) | = 2014.1.1 | No fix listed |
| pypi salt(PyPI) | = 2014.1.10 | No fix listed |
| pypi salt(PyPI) | = 2014.1.11 | No fix listed |
| pypi salt(PyPI) | = 2014.1.12 | No fix listed |
| pypi salt(PyPI) | = 2014.1.13 | No fix listed |
| pypi salt(PyPI) | = 2014.1.2 | No fix listed |
| pypi salt(PyPI) | = 2014.1.3 | No fix listed |
| pypi salt(PyPI) | = 2014.1.4 | No fix listed |
| pypi salt(PyPI) | = 2014.1.5 | No fix listed |
| pypi salt(PyPI) | = 2014.1.6 | No fix listed |
| pypi salt(PyPI) | = 2014.1.7 | No fix listed |
| pypi salt(PyPI) | = 2014.1.8 | No fix listed |
| pypi salt(PyPI) | = 2014.1.9 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc1 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc2 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc3 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc4 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc5 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc6 | No fix listed |
| pypi salt(PyPI) | = 2014.7.0rc7 | No fix listed |
| pypi salt(PyPI) | = 2014.7.1 | No fix listed |
| pypi salt(PyPI) | = 2014.7.2 | No fix listed |
| pypi salt(PyPI) | = 2014.7.3 | No fix listed |
| pypi salt(PyPI) | = 2014.7.4 | No fix listed |
| pypi salt(PyPI) | = 2014.7.5 | No fix listed |
| pypi salt(PyPI) | = 2014.7.6 | No fix listed |
| pypi salt(PyPI) | = 2014.7.7 | No fix listed |
| pypi salt(PyPI) | = 2015.2.0rc1 | No fix listed |
| pypi salt(PyPI) | = 2015.2.0rc2 | No fix listed |
| pypi salt(PyPI) | = 2015.5.0 | No fix listed |
| pypi salt(PyPI) | = 2015.5.1 | No fix listed |
| pypi salt(PyPI) | = 2015.5.10 | No fix listed |
| pypi salt(PyPI) | = 2015.5.11 | No fix listed |
| pypi salt(PyPI) | = 2015.5.2 | No fix listed |
| pypi salt(PyPI) | = 2015.5.3 | No fix listed |
| pypi salt(PyPI) | = 2015.5.4 | No fix listed |
| pypi salt(PyPI) | = 2015.5.5 | No fix listed |
| pypi salt(PyPI) | = 2015.5.6 | No fix listed |
| pypi salt(PyPI) | = 2015.5.7 | No fix listed |
| pypi salt(PyPI) | = 2015.5.8 | No fix listed |
| pypi salt(PyPI) | = 2015.5.9 | No fix listed |
| pypi salt(PyPI) | = 2015.8.0 | No fix listed |
| pypi salt(PyPI) | = 2015.8.0rc1 | No fix listed |
| pypi salt(PyPI) | = 2015.8.0rc2 | No fix listed |
| pypi salt(PyPI) | = 2015.8.0rc3 | No fix listed |
| pypi salt(PyPI) | = 2015.8.0rc4 | No fix listed |
| pypi salt(PyPI) | = 2015.8.0rc5 | No fix listed |
| pypi salt(PyPI) | = 2015.8.1 | No fix listed |
| pypi salt(PyPI) | = 2015.8.2 | No fix listed |
| saltstack salt | <= 2015.8.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com
- docs.saltstack.com release-notes vendor-advisory
- github.com
- github.com product
- web.archive.org
- 96390 vdb-entry
- github.com vendor-advisory