Summaryinfo

A vulnerability classified as problematic has been found in SaltStack Salt 2014.1.9. Impacted is an unknown function. Performing a manipulation results in link following. This vulnerability was named CVE-2014-3563. There is no available exploit. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in SaltStack Salt 2014.1.9. This affects some unknown processing. The manipulation with an unknown input leads to a link following vulnerability. CWE is classifying the issue as CWE-59. The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

The weakness was presented 08/22/2014 as not defined mailinglist post (oss-sec). The advisory is shared at seclists.org. This vulnerability is uniquely identified as CVE-2014-3563 since 05/14/2014. The exploitability is told to be easy. An attack has to be approached locally. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available.

Upgrading to version 2014.1.9 eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (95392) and SecurityFocus (BID 69319†). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• SaltStack

Name

• Salt

Version

• 2014.1.9

License

• open-source

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion