CVE-2015-1838

Description

modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
0.069

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2015-1838,CVE-2015-1839 are affected in VMware SALT 2014.7.3Windows
Vulnerabilities CVE-2015-1838,CVE-2015-1839 are fixed in Python-salt 2014.7.4Windows
Kernel-uek update (ELSA-2020-5913) kernel-uek-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-debug update (ELSA-2020-5913) kernel-uek-debug-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-debug-devel update (ELSA-2020-5913) kernel-uek-debug-devel-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-devel update (ELSA-2020-5913) kernel-uek-devel-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-tools update (ELSA-2020-5913) kernel-uek-tools-4.14.35-2025.402.2.1.el7uek.x86_64.rpmLinux
Kernel-uek-doc update (ELSA-2020-5913) kernel-uek-doc-4.14.35-2025.402.2.1.el7uek.noarch.rpmLinux
Vulnerabilities CVE-2015-1838,CVE-2015-1839 are fixed in Python-salt for linux 2014.7.4Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234