CVE-2014-3563: Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an...

Security readout for executives and security teams

This is an old Salt/SaltStack issue affecting versions before 2014.1.10. The public record says local users could trigger unspecified impact through temporary file creation behavior in seed.py, salt-ssh, or salt-cloud. The sources do not provide severity, impact detail, or active exploitation evidence. Exposure is most likely in legacy Salt deployments older than 2014.1.10, especially systems where lower-privileged local users can access hosts running affected Salt tooling. Prioritize as legacy risk cleanup unless affected Salt versions are still present on shared or multi-user systems. Business urgency depends on whether outdated Salt tooling remains deployed and reachable by local users. Mitigation focus: Upgrade Salt/SaltStack to 2014.1.10 or a later supported release.; Identify systems using seed.py, salt-ssh, or salt-cloud in legacy deployments.; Restrict local shell access on hosts running affected Salt components..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.