Skip to content
OpenAdvisories
Medium · 5.3 CVE-2015-1839 EUVD-2017-0114GHSA-6grp-75pq-c8cjPYSEC-2017-30

SaltStack has insecure /tmp file handling in salt/modules/chef.py

Published Apr 13, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Description

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI salt < 2014.7.4 2014.7.4 GHSA-6grp-75pq-c8cj

References