GitHub Advisoryadvisory · PyPI

GHSA-mfr3-9cj8-h2qm SaltStack Salt Insecure Temporary File Creation

HIGH Published 2022-05-17 Modified 2024-10-21 Official page ↗
Aliases
CVE-2014-3563
Ecosystem
PyPI
Packages
salt
Severity
High
Weaknesses
CWE-59
Reviewed
2024-04-22

Affected packages

• PyPI salt: < 2014.1.10 → fixed in 2014.1.10

Description

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

Related

Alias · CVE (1)

  • CVE-2014-3563 Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors… vulnerability

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References