SaltStack

Records56All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

SaltStack records in CISA KEV

Products in the NVD configurations · select one to filter the records

2 records in Salt 2015 · all components

TI-2015-05789 CVE-2015-6941 · GHSA-cxm4-7qcw-267r

MEDIUM 47

win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02886 Published 2017-08-09 Partial fix · 2015.5.6, 2015.8.1 CWE-534

TI-2015-05770 CVE-2015-6918 · GHSA-q2x6-8gfj-hjxw

LOW 31

salt before 2015.5.5 leaks git usernames and passwords to the log.

CVSS 3.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01244 Published 2017-10-10 Partial fix · 2015.5.5 CWE-200