CVE-2015-6918 — salt leaks git usernames and passwords to the log · VulnScope

CVE-2015-6918

salt leaks git usernames and passwords to the log

6.3

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

salt before 2015.5.5 leaks git usernames and passwords to the log.

How to fix CVE-2015-6918

To remediate CVE-2015-6918, upgrade the affected package to a fixed version below.

PyPI/salt—upgrade to 2015.5.5 or later
PyPI/salt—upgrade to 28aa9b105804ff433d8f663b2f9b804f2b75495a or later

Is CVE-2015-6918 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

from 0, < 2015.5.5
from 0, < 28aa9b105804ff433d8f663b2f9b804f2b75495a | from 0, < 2015.5.5

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.3	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

References (8)