CVE-2015-6941

CVE-2015-6941

EPSS 2.2%

win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugzilla.redhat.com/show_bug.cgi?id=1273066 https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710