Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Salt 信息泄露漏洞
Vulnerability Description
Salt（又名SaltStack）是美国SaltStack公司的一套开源的用于管理基础架构的工具。该工具提供配置管理、远程执行等功能，能够管理上万台服务器，具有快速完成数据传递的能力。 Salt 2015.8.3之前的版本中的‘state.sls’函数存在安全漏洞，该漏洞源于程序为缓存数据分配弱权限。本地攻击者可通过读取文件利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A