{"id":"CVE-2015-6941","aliases":["EUVD-2017-0125","GHSA-cxm4-7qcw-267r","PYSEC-2017-71","UBUNTU-CVE-2015-6941","USN-4769-1"],"status":"published","title":"salt password information leaked in debug logs","description":"win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02886,"percentile":0.86963,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-534"],"published":"2017-08-09T16:00:00Z","modified":"2026-06-29T13:48:13Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["2015.5.6","2015.8.1"],"sources":["ghsa","osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","fixed_in":["0.17.5+ds-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2015.5"},{"fixed":"2015.5.6"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2015.8"},{"fixed":"2015.8.1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2015.5"},{"fixed":"2015.5.6"}]}],"versions":["2015.5.0","2015.5.1","2015.5.2","2015.5.3","2015.5.4","2015.5.5"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2015.8"},{"fixed":"2015.8.1"}]}],"versions":["2015.8.0"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"c0689e32154c41f59840ae10ffc5fbfa30618710"}]},{"type":"ECOSYSTEM","events":[{"introduced":"2015.5"},{"fixed":"2015.5.6"},{"introduced":"2015.8"},{"fixed":"2015.8.1"}]}],"versions":["2015.5.0","2015.5.1","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.8.0","v2014.7.6","v2014.7.5","v2014.7.4","v2014.7.3","v2014.7.2","v2014.7.1","v2014.7.0","v2014.7","v2014.7.0rc7","v2014.7.0rc6","v2014.7.0rc5","v2014.7.0rc3","v2014.7.0rc4","v2014.7.0rc2","v2014.7.0rc1","v2014.1","v0.17","v0.16","v0.15.0","v0.14.0","v0.13.0","v0.12.0","v0.11.0","v0.10.5","v0.10.4","v0.10.3","v0.10.2","v0.10.1","v0.10.0","v0.9.9","v0.9.3","v0.9.2","v0.9.1","v0.9.0","v0.8.9","v0.8.7","v0.8.0","v0.7.0","v0.6.0"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.5+ds-1ubuntu0.1~esm1"}]}],"versions":["0.16.0-1","0.16.4-2","0.17.1+dfsg-1","0.17.2-1","0.17.2-2","0.17.2-3","0.17.4-1","0.17.4-2","0.17.5-1","0.17.5+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.5+ds-1ubuntu0.1~esm1"}]}],"versions":["0.16.0-1","0.16.4-2","0.17.1+dfsg-1","0.17.2-1","0.17.2-2","0.17.2-3","0.17.4-1","0.17.4-2","0.17.5-1","0.17.5+ds-1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.8.8+ds-1ubuntu0.1+esm1"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1"],"bundled":8}],"products":[{"vendor":"saltstack","product":"salt_2015"}],"references":[{"url":"https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","web"]},{"url":"https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273066","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","VDB Entry","web","report"]},{"url":"https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","web","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6941","tags":["advisory"]},{"url":"https://github.com/saltstack/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710","tags":["web"]},{"url":"https://github.com/saltstack/salt/commit/fdd35374562658f4a20767a3703fab93d92f9ca9","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-71.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-cxm4-7qcw-267r","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2015-6941","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6941","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4769-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-6918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12791","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-15750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-15751","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-6941","description":"win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.","status":"published","published":"2017-08-09T16:00:00Z","modified":"2024-08-06T07:36:34.757Z","updated_at":"2026-11-02T14:35:42.680858Z"}],"euvd":[{"id":"EUVD-2017-0125","description":"win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.","status":"published","published":"2017-08-09T16:00:00Z","modified":"2024-08-06T07:36:34Z","updated_at":"2026-11-03T02:21:54.34629Z"}],"ghsa":[{"id":"GHSA-cxm4-7qcw-267r","title":"salt password information leaked in debug logs","description":"win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.","status":"published","published":"2022-05-17T01:59:05Z","modified":"2024-10-21T21:47:42Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:38:12.325695Z"}],"nvd":[{"id":"CVE-2015-6941","description":"win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.","status":"published","published":"2017-08-09T16:29:00.33Z","modified":"2026-06-17T00:31:38.93Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-534"],"updated_at":"2026-11-02T14:03:17.730372Z"}],"osv":[{"id":"GHSA-cxm4-7qcw-267r","title":"salt password information leaked in debug logs","description":"win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.","status":"published","published":"2022-05-17T01:59:05Z","modified":"2024-10-21T22:00:57.065742Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:45.639885Z"},{"id":"UBUNTU-CVE-2015-6941","description":"win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.","status":"published","published":"2017-08-09T16:29:00Z","modified":"2026-02-04T04:24:41.112969Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:10.737723Z"},{"id":"PYSEC-2017-71","description":"win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.","status":"published","published":"2017-08-09T16:29:00Z","modified":"2026-06-10T17:14:19.044634601Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"USN-4769-1","title":"salt vulnerabilities","description":"It was discovered that Salt allowed remote attackers to write to\narbitrary files via a special crafted file. An attacker could use this\nvulnerability to cause a DoS or possibly execute arbitrary code. This\nissue only affected Ubuntu 14.04 ESM. (CVE-2014-3563)\n\nAndreas Stieger discovered that Salt exposed git usernames and passwords\nin log files. An attacker could use this issue to retrieve sensitive\ninformation. This issue only affected Ubuntu 14.04 ESM. (CVE-2015-6918).\n\nIt was discovered that Salt exposed password authentication\ncredentials in log files. An attacker could use this issue to retrieve\nsensitive information. This issue only affected Ubuntu 14.04 ESM.\n(CVE-2015-6941)\n\nIt was discovered that Salt allowed remote attackers to write to\narbitrary files via a special crafted file. An attacker could use this \nissue to cause a DoS or possibly execute arbitrary code. (CVE-2017-12791,\nCVE-2017-14695, CVE-2017-14696)\n\nIt was discovered that Salt allowed remote attackers to determine which\nfiles exist on the server. An attacker could use this issue to extract\nsensitive information. This issue only affected Ubuntu 16.04 ESM.\n(CVE-2018-15750)\n\nIt was discovered that Salt allowed users to bypass authentication. An\nattacker could use this issue to extract sensitive information, execute\narbitrary code or crash the server. This issue only affected Ubuntu 16.04\nESM. (CVE-2018-15751)","status":"published","published":"2021-03-15T20:11:16Z","modified":"2026-06-29T13:48:13.302310265Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}