As long as she doesn’t associate names with those salaries in the conversation, i don’t think it’s unethical. Or she doesn’t act on those salaries and commit some kind of security fraud, it’s just a conversation.