CVE-2015-1838: Medium severity SaltStack Salt vulnerability
modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
Other sources
Michael Scherer of Red Hat reported an insecure /tmp file handling in salt/modules/serverdensitydevice.py in SaltStack. This issue is fixed in SaltStack version 2014.7.4 with this commit:
https://github.com/saltstack/salt/commit/e11298d7155e9982749483ca5538e46090caef9c
External References:
http://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html
Acknowledgements:
Red Hat would like to thank Michael Scherer of Red Hat for reporting this issue.
Statement:
This issue did not affect versions of salt as shipped with Red Hat Red Hat Ceph Storage as they did not include the vulnerable module.
— Red Hat
modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
— NVD
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1838?
CVE-2015-1838 is considered a moderate severity vulnerability due to its improper handling of temporary files.
How do I fix CVE-2015-1838?
To fix CVE-2015-1838, upgrade SaltStack to version 2014.7.4 or later.
What versions of SaltStack are affected by CVE-2015-1838?
SaltStack versions prior to 2014.7.4 are affected by CVE-2015-1838.
Who reported the CVE-2015-1838 vulnerability?
CVE-2015-1838 was reported by Michael Scherer of Red Hat.
Where is the vulnerable code located for CVE-2015-1838?
The vulnerable code for CVE-2015-1838 is located in the `modules/serverdensity_device.py` file in SaltStack.