CVE-2015-1839: SaltStack before 2014.7.4 Insecure Temporary File Handling
Summary
CVE-2015-1839: modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp. Affects salt across 3 version ranges.
< 22d2f7a1ec93300c34e8c42d14ec39d51e610b5c
< 2014.7.4
< b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81
Fixed in b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SaltStack is a popular configuration management and orchestration tool used for managing and automating the deployment and configuration of systems. It provides a client-server architecture where the Salt master controls and manages multiple Salt minions. The minions execute commands and configurations sent by the master. This vulnerability affects SaltStack versions prior to 2014.7.4 and specifically impacts the 'chef' module in the SaltStack codebase. The 'chef.py' file in the 'modules' directory does not handle files in the '/tmp' directory securely.
Vulnerability Detail
The vulnerability arises from the insecure handling of files in the '/tmp' directory by the 'chef.py' module in SaltStack. This can lead to various security risks, including unauthorized access, privilege escalation, and potential code execution. An attacker with local access to the system could exploit this vulnerability to manipulate or replace files in the '/tmp' directory, potentially leading to further compromise of the system.
How To Fix
Latest published version: 3008.3.0 as of 22 Oct 2026
pip install --upgrade "salt==3008.3.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81
This is the first release that contains the fix.
pip install --upgrade "salt==b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately feasible, users can implement a workaround by manually modifying the 'chef.py' file in the SaltStack installation. The specific changes required to address the insecure file handling in the '/tmp' directory can be found in the SaltStack GitHub repository. It is important to carefully review and test any modifications before applying them to production systems.
Conclusion
In conclusion, the vulnerability in SaltStack before version 2014.7.4 allows for insecure handling of files in the '/tmp' directory, which can lead to unauthorized access and potential compromise of the system. It is crucial to upgrade to the latest version or apply the necessary modifications to address this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for salt →
FAQ
SaltStack is a configuration management and orchestration tool used for managing and automating the deployment and configuration of systems. It follows a client-server architecture where the Salt master controls multiple Salt minions.
The 'chef' module in SaltStack provides integration with the Chef configuration management tool. It allows SaltStack to interact with Chef resources and execute Chef recipes.
This vulnerability can lead to unauthorized access, privilege escalation, and potential code execution. An attacker with local access to the system could manipulate or replace files in the '/tmp' directory, potentially compromising the system.
To fix this vulnerability, it is recommended to upgrade to SaltStack version 2014.7.4 or later. Alternatively, users can manually modify the 'chef.py' file in the SaltStack installation to address the insecure file handling in the '/tmp' directory.
You can find more information about this vulnerability, including the specific changes required to address it, in the SaltStack GitHub repository and the PyPA advisory database.
Related vulnerabilities
Recent vulnerabilities recorded for salt.
