The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8153-1 advisory.

    Zach Malone discovered that Salt did not properly handle permissions to cache data. A local attacker could     possibly use this issue to obtain sensitive information. (CVE-2015-8034) Dylan Frese discovered that Salt     incorrectly allowed users to specify PAM service. An attacker could possibly use this issue to bypass     authentication. (CVE-2016-3176)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local
    users to obtain sensitive information by reading the file. (CVE-2015-8034)

Updated dnf patch ---- Update to bugfix release 2015.5.9, patched with proper dnf support

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Salt release notes report :

CVE-2015-8034: Saving state.sls cache data to disk with insecure permissions

This affects users of the state.sls function. The state run cache on the minion was being created with incorrect permissions. This file could potentially contain sensitive data that was inserted via jinja into the state SLS files. The permissions for this file are now being set correctly. Thanks to @zmalone for bringing this issue to our attention.

ID	Name	Product	Family	Type	Severity
306098	Ubuntu 14.04 LTS : Salt vulnerabilities (USN-8153-1)	Nessus	Ubuntu Local Security Checks	Local	medium
434925	SCA: security update for salt (GHSA-6prw-8xhm-h247)	Tenable Cloud Security	SCA Checks	Local	low
434925	SCA: security update for salt (GHSA-6prw-8xhm-h247)	Tenable Self-Hosted Container Security	SCA Checks	Local	low
89609	Fedora 22 : salt-2015.5.9-2.fc22 (2016-c1fd651bc0)	Nessus	Fedora Local Security Checks	Local	low
87229	FreeBSD : Salt -- information disclosure (e6b974ab-9d35-11e5-8f5c-002590263bf5)	Nessus	FreeBSD Local Security Checks	Local	low

Detections

Analytics

CVE-2015-8034

low

Tenable Plugins

medium

low

low

low

low