SaltStack Salt Information Disclosure Vulnerability (CNVD-2017-01659)

Salt a.k.a. SaltStack is an open source set of tools for managing infrastructure from SaltStack, Inc. in the United States. A security vulnerability exists in versions of Salt prior to 2015.8.3 that stems from the program assigning weak permissions to cached data. A local attacker could exploit t...