GitHub Advisoryadvisory · PyPI

GHSA-cxm4-7qcw-267r salt password information leaked in debug logs

CRITICAL Published 2022-05-17 Modified 2024-10-21 Official page ↗
Aliases
CVE-2015-6941
Ecosystem
PyPI
Packages
salt
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-200
Reviewed
2024-05-01

Affected packages

• PyPI salt: >= 2015.5, < 2015.5.6 → fixed in 2015.5.6 • PyPI salt: >= 2015.8, < 2015.8.1 → fixed in 2015.8.1

Description

win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.

Related

Alias · CVE (1)

  • CVE-2015-6941 win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References