CVE-2015-6941

EUVD-2017-0125
win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
saltstacksalt_2015
5.0
saltstacksalt_2015
5.1
saltstacksalt_2015
5.2
saltstacksalt_2015
5.3
saltstacksalt_2015
5.4
saltstacksalt_2015
5.5
saltstacksalt_2015
8.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
salt
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
precise
dne
trusty
Fixed 0.17.5+ds-1ubuntu0.1~esm1
released
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
not-affected
zesty
not-affected
Common Weakness Enumeration
References
https://bugzilla.redhat.com/show_bug.cgi?id=1273066
https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html
https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html
https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710
https://bugzilla.redhat.com/show_bug.cgi?id=1273066
https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html
https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html
https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710