CVE-2015-1839

MEDIUM5.3EPSS 0.08%

SaltStack has insecure /tmp file handling in salt/modules/chef.py

發布日:2022/5/17修改日:2024/12/1
也稱為:GHSA-6grp-75pq-c8cjPYSEC-2017-30

描述

`modules/chef.py` in SaltStack before 2014.7.4 does not properly handle files in `/tmp`.

受影響套件(2)

  • PyPI/saltfrom 0, < 2014.7.4
  • PyPI/saltfrom 0, < b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81, < 22d2f7a1ec93300c34e8c42d14ec39d51e610b5c | from 0, < 2014.7.4

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM5.3CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

參考連結(8)