← All advisories

Medium severity6.3NVD Advisory· Published Oct 10, 2017· Updated Jun 17, 2026

CVE-2015-6918

CVE-2015-6918

Description

salt before 2015.5.5 leaks git usernames and passwords to the log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
saltPyPI	< 2015.5.5	2015.5.5

Affected products

2

Saltstack/Salt 2015
cpe:2.3:a:saltstack:salt_2015:*:*:*:*:*:*:*:*
Range: <=5.4
ghsa-coords
pkg:pypi/salt
Range: < 2015.5.5

Patches

Vulnerability mechanics

References

7

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party AdvisoryVDB EntryWEB
github.com/saltstack/salt/commit/28aa9b105804ff433d8f663b2f9b804f2b75495anvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-q2x6-8gfj-hjxwghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2015-6918ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-70.yamlghsaWEB
github.com/saltstack/salt/issues/26484ghsaWEB
github.com/saltstack/salt/pull/26486ghsaWEB

News mentions

0

No linked articles in our index yet.