Описание
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ceph Storage 1.2 | calamari-server | Will not fix | ||
| Red Hat Ceph Storage 1.2 | salt | Will not fix | ||
| Red Hat Ceph Storage 1.3 | calamari-server | Will not fix | ||
| Red Hat Ceph Storage 1.3 | salt | Will not fix |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1289109salt: Information leak from state.sls cache data stored as world-readable
EPSS
Процентиль: 35%
0.00404
Низкий
4 Medium
CVSS2
Связанные уязвимости
CVSS3: 3.3
ubuntu
почти 10 лет назад
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
CVSS3: 3.3
nvd
почти 10 лет назад
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
CVSS3: 3.3
debian
почти 10 лет назад
The state.sls function in Salt before 2015.8.3 uses weak permissions o ...
CVSS3: 3.3
altlinux
больше 10 лет назад
ALT-PU-2016-1175: package `salt` update to version 2015.8.7-alt1
EPSS
Процентиль: 35%
0.00404
Низкий
4 Medium
CVSS2