← Back

CVE-2015-6941

nvd nist
Published: Aug 9, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.

Affected (7)

Products: Saltstack: Salt 2015
Saltstack
1 product
Salt 2015
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Saltstack
Salt 2015
Version 5.0
Salt 2015
Version 5.1
Salt 2015
Version 5.2
Salt 2015
Version 5.3
Salt 2015
Version 5.4
Salt 2015
Version 5.5
Salt 2015
Version 8.0

Related CWEs

CWE-534
DEPRECATED: Information Exposure Through Debug Log Files
This entry has been deprecated because its abstraction was too low-level. See CWE-532.

References (8)

Source: cve@mitre.org
Issue TrackingPatchThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.