CVE-2015-1839

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

• CWE-19

• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1212788Issue Tracking, Patch
• https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.htmlRelease Notes, Vendor Advisory
• https://github.com/saltstack/salt/commit/22d2f7a1ec93300c34e8c42d14ec39d51e610b5cIssue Tracking, Patch, Third Party Advisory
• https://github.com/saltstack/salt/commit/b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81Issue Tracking, Patch, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1212788Issue Tracking, Patch
• https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.htmlRelease Notes, Vendor Advisory
• https://github.com/saltstack/salt/commit/22d2f7a1ec93300c34e8c42d14ec39d51e610b5cIssue Tracking, Patch, Third Party Advisory
• https://github.com/saltstack/salt/commit/b49d0d4b5ca5c6f31f03e2caf97cef1088eeed81Issue Tracking, Patch, Third Party Advisory

Published

Apr 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1833XML external entity (XXE) vulnerability in Apache Jackrabbit…
• CVE-2015-1834A path traversal vulnerability was identified in the Cloud F…6.5
• CVE-2015-1835Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, wh…
• CVE-2015-1836Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and …
• CVE-2015-1837Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1838modules/serverdensity_device.py in SaltStack before 2014.7.4…
• CVE-2015-1840jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.…
• CVE-2015-1841The Web Admin interface in Red Hat Enterprise Virtualization…
• CVE-2015-1842The puppet manifests in the Red Hat openstack-puppet-modules…
• CVE-2015-1843The Red Hat docker package before 1.5.0-28, when using the -…
• CVE-2015-1844Foreman before 1.7.5 allows remote authenticated users to by…
• CVE-2015-1845Buffer overflow in the EntrReadArch function in unzoo might …