PyPI/salt CVE-2015-6918: medium 6.3, EPSS 1.24%

salt before 2015.5.5 leaks git usernames and passwords to the log.

Action: Upgrade salt to 2015.5.5 or later.

pip install salt==2015.5.5

Affected

Fixed versions

Sources

• osv: PYSEC-2017-70
• nvd: CVE-2015-6918
• https://github.com/saltstack/salt/commit/28aa9b105804ff433d8f663b2f9b804f2b75495a
• https://bugzilla.redhat.com/show_bug.cgi?id=1257154
• https://github.com/advisories/GHSA-q2x6-8gfj-hjxw

CVE-2015-6918 · published 2017-10-10T16:29:00Z · modified 2026-06-10T17:02:50.013660295Z · JSON