Read the docs

Puppetlabs

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Puppetlabs records in CISA KEV

No Puppetlabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Puppet 29 records MEDIUM Puppet Enterprise Users 5 records LOW Facter 2 records LOW Mcollective 1 record LOW Mcollective-puppet-agent 1 record LOW Puppet Enterprise 1 record LOW

Records

1 record in Puppet Enterprise · all components

TI-2016-02329 CVE-2016-2787 · GHSA-frr9-9gjp-4944

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not…

Priority LOW 25

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00596 Published 2017-02-13 No fix listed CWE-284
Open these records in search →