CVE-2014-3563

Summary

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

Impact & exploitability

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html ↗

Additional information

• NVD record
• http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.htmlPatch
• http://seclists.org/oss-sec/2014/q3/428Patch
• http://www.securityfocus.com/bid/69319
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95392