CVE-2015-6941

Critical

Published: 09/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Versions of salt 2015.5.x before 2015.5.6 and 2015.8.x before 2015.8.1 have a vulnerability that leaks password information in debug logs. This affects win_useradd, salt-cloud, and the Linode driver.

Risk Assessment

Leaked password information can lead to unauthorized access to systems, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to version 2015.5.6 or 2015.8.1 to mitigate this vulnerability and secure logs from exposing sensitive information.

Original NVD description (English source)

win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.