Описание
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
Отчет
This issue did not affect versions of salt as shipped with Red Hat Red Hat Ceph Storage as they did not include the vulnerable module.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ceph Storage 1.2 | salt | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-377
https://bugzilla.redhat.com/show_bug.cgi?id=1212788salt: insecure /tmp file handling in salt/modules/chef.py
3.7 Low
CVSS2
Связанные уязвимости
CVSS3: 5.3
ubuntu
больше 9 лет назад
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
CVSS3: 5.3
nvd
больше 9 лет назад
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
CVSS3: 5.3
debian
больше 9 лет назад
modules/chef.py in SaltStack before 2014.7.4 does not properly handle ...
CVSS3: 5.3
github
около 4 лет назад
SaltStack has insecure /tmp file handling in salt/modules/chef.py
3.7 Low
CVSS2