CVE-2014-3563

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
VendorProductVersion
saltstacksalt
𝑥
≤ 2014.1.9
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
salt
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
Fixed 0.17.5+ds-1ubuntu0.1~esm1
released
precise
dne
lucid
dne
Common Weakness Enumeration
References
http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html
http://seclists.org/oss-sec/2014/q3/428
http://www.securityfocus.com/bid/69319
https://exchange.xforce.ibmcloud.com/vulnerabilities/95392
http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html
http://seclists.org/oss-sec/2014/q3/428
http://www.securityfocus.com/bid/69319
https://exchange.xforce.ibmcloud.com/vulnerabilities/95392