CVE-2015-1839: Medium severity SaltStack Salt vulnerability
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
Other sources
Michael Scherer of Red Hat reported an insecure /tmp file handling in salt/modules/chef.py in SaltStack. This issue is fixed in SaltStack version 2014.7.4 with these commits:
https://github.com/saltstack/salt/commit/22d2f7a1ec93300c34e8c42d14ec39d51e610b5c https://github.com/saltstack/salt/commit/b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81
External References:
http://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html
Acknowledgements:
Red Hat would like to thank Michael Scherer of Red Hat for reporting this issue.
Statement:
This issue did not affect versions of salt as shipped with Red Hat Red Hat Ceph Storage as they did not include the vulnerable module.
— Red Hat
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
— NVD
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1839?
CVE-2015-1839 is considered to have a high severity due to its potential to expose sensitive information through improper file handling.
How do I fix CVE-2015-1839?
To fix CVE-2015-1839, upgrade SaltStack to version 2014.7.4 or later.
What systems are affected by CVE-2015-1839?
CVE-2015-1839 affects SaltStack versions prior to 2014.7.4 and certain Fedora systems.
Who reported CVE-2015-1839?
CVE-2015-1839 was reported by Michael Scherer of Red Hat.
What is the main issue described in CVE-2015-1839?
The main issue in CVE-2015-1839 is the insecure handling of files in the /tmp directory by SaltStack's chef.py module.