Saltstack Salt 2015 — known CVE vulnerabilities

Every CVE whose affected-product data names Saltstack Salt 2015, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-6941 — CVSS 9.8 (critical): win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in…
• CVE-2015-6918 — CVSS 6.3 (medium): salt before 2015.5.5 leaks git usernames and passwords to the log.