In short
- CVE-2014-3563 is a HIGH (CVSS 7.2) vulnerability affecting salt, salt (saltstack).
- Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.0% of all vulnerabilities.
- Fix: update to 2014.1.10 or later.
| Package | Affected versions | Patched versions |
|---|
| salt PyPI | < 2014.1.10
| 2014.1.10
|
| salt | ≤ 2014.1.9
| No fix yet |
Description
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.
NVD description
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free