Lucene search
Veracode Vulnerability DatabaseVERACODE:3578HistoryFeb 14, 2017 - 2:19 a.m.
Information Disclosure
2017-02-1402:19:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0
Percentile
5.1%
salt is vulnerable to information disclosures. The library stores it secrets in a file called highstate.cache.p that is world readable, allowing a malicious user to access sensitive information.
Related
fedora
fedora
[SECURITY] Fedora 22 Update: salt-2015.5.9-2.fc22
2016-02-05 00:23:03
nessus
nessus
Fedora 22 : salt-2015.5.9-2.fc22 (2016-c1fd651bc0)
2016-03-04 00:00:00
github
github
Salt uses weak permissions on the cache data
2022-05-17 02:57:25
debiancve
debiancve
CVE-2015-8034
2017-01-30 22:59:00
cvelist
cvelist
CVE-2015-8034
2017-01-30 22:00:00
nvd
nvd
CVE-2015-8034
2017-01-30 22:59:00
ubuntucve
ubuntucve
CVE-2015-8034
2017-01-30 00:00:00
freebsd
freebsd
Salt -- information disclosure
2015-11-25 00:00:00
prion
prion
Design/Logic Flaw
2017-01-30 22:59:00
osv
osv
PYSEC-2017-32
2017-01-30 22:59:00
cve
cve
CVE-2015-8034
2017-01-30 22:59:00