CVE-2015-8034: Infoleak
Published Jan 30, 2017
·Updated
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
Affected Software
2 affected componentsFixes available
pip/salt<2015.8.3
2015.8.3
SaltStack Salt<=2015.8.2
Event History
Jan 30, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:59 PM
DescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·02:57 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-8034?
The severity of CVE-2015-8034 is considered medium due to potential exposure of sensitive information.
2
How do I fix CVE-2015-8034?
To fix CVE-2015-8034, upgrade to Salt version 2015.8.3 or later.
3
What are the symptoms of CVE-2015-8034?
The symptoms of CVE-2015-8034 may include unauthorized access to sensitive cache data by local users.
4
Which versions of Salt are affected by CVE-2015-8034?
CVE-2015-8034 affects Salt versions prior to 2015.8.3.
5
Is CVE-2015-8034 a local or remote vulnerability?
CVE-2015-8034 is a local vulnerability, as it requires local user access to exploit.