Read the docs

Puppetlabs

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Puppetlabs records in CISA KEV

No Puppetlabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Puppet 29 records MEDIUM Puppet Enterprise Users 5 records LOW Facter 2 records LOW Mcollective 1 record LOW Mcollective-puppet-agent 1 record LOW Puppet Enterprise 1 record LOW

Records

1 record in Mcollective · all components

TI-2014-02595 CVE-2014-3251 · GHSA-q495-m6p3-c645

The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and…

Priority LOW 20

The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not properly validate new server certificates based on the CA certificate, which allows local users to est…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00175 Published 2014-08-12 Will not fix CWE-362
Open these records in search →