What is GHSA-mfr3-9cj8-h2qm?

GHSA-mfr3-9cj8-h2qm is a security advisory published by GitHub Security Advisories with High severity. SaltStack Salt Insecure Temporary File Creation

Which CVE IDs does GHSA-mfr3-9cj8-h2qm cover?

GHSA-mfr3-9cj8-h2qm covers the following CVE IDs: CVE-2014-3563. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-mfr3-9cj8-h2qm?

GHSA-mfr3-9cj8-h2qm affects 1 product, including: pip/salt:\u003c 2014.1.10.

GHSA-mfr3-9cj8-h2qmHigh

SaltStack Salt Insecure Temporary File Creation

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

October 21, 2024

🔗 CVE IDs covered (1)

CVE-2014-3563 →

📋 Description

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

🎯 Affected products1

pip/salt:< 2014.1.10

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2014-3563
https://exchange.xforce.ibmcloud.com/vulnerabilities/95392
http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html
http://seclists.org/oss-sec/2014/q3/428
https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2014-18.yaml
https://github.com/advisories/GHSA-mfr3-9cj8-h2qm