CVE-2015-8034

Опубликовано: 30 янв. 2017

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

Ссылки

http://www.securityfocus.com/bid/96390
https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.html
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/96390
https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.html
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*

Версия до 2015.8.2 (включая)

EPSS

Процентиль: 35%

0.00404

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2015-8034

CVSS3: 3.3

ubuntu

почти 10 лет назад

The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

CVE-2015-8034

redhat

около 11 лет назад

The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

CVE-2015-8034

CVSS3: 3.3

debian

почти 10 лет назад

The state.sls function in Salt before 2015.8.3 uses weak permissions o ...

GHSA-6prw-8xhm-h247

CVSS3: 3.3

github

больше 4 лет назад

Salt uses weak permissions on the cache data

ALT-PU-2016-1175

CVSS3: 3.3

altlinux

больше 10 лет назад

ALT-PU-2016-1175: package `salt` update to version 2015.8.7-alt1

EPSS

Процентиль: 35%

0.00404

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200