Launchpad.net

CVE 2016-9639

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.

See the CVE page on Mitre.org for more details.