CVE-2015-8034

LOW

Salt < 2015.8.3 - Exposure of Sensitive Information via Weak Cache Permissions

Title source: llm

Description

The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/96390

Release Notes, Vendor Advisory x_refsource_confirm

https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.html

Scores

CVSS v3 3.3

EPSS 0.0041

EPSS Percentile 32.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

pypi/salt 0 - 2015.8.3PyPI

saltstack/salt < 2015.8.2

Published Jan 30, 2017

Tracked Since Feb 18, 2026