Puppet

Records130All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical19CVSS 9.0–10.0

CVSS high30CVSS 7.0–8.9

Exploited now

Puppet records in CISA KEV

No Puppet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Puppet Enterprise 89 records HIGH Puppet 42 records MEDIUM Puppet Agent 8 records MEDIUM Puppet Server 7 records MEDIUM Continuous Delivery 4 records LOW Marionette Collective 3 records MEDIUM Puppetdb 3 records MEDIUM Puppetlabs-mysql 3 records MEDIUM

Records

3 records in Marionette Collective · all components

TI-2016-02330 CVE-2016-2788 · GHSA-v3fx-f8x7-f9vf

MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote…

MEDIUM 46

MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02284 Published 2017-02-13 Will not fix CWE-284

TI-2014-00169 CVE-2014-0175 · GHSA-7v8f-rmc9-7586

mcollective has a default password set at install

MEDIUM 46

mcollective has a default password set at install

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02028 Published 2019-12-13 Partial fix CWE-798

TI-2014-02592 CVE-2014-3248 · GHSA-92v7-pq4h-58j5

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before…

LOW 28

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with…

CVSS 2.0MEDIUM 6.2 Local No auth Interaction — EPSS 0.00542 Published 2014-11-16 Partial fix · 1.7.6, 2.0.2 +4 CWE-17

Open these records in search →

Critical	19
High	30
Medium	67
Low	14
No CVSS	0