TI-2014-00169 CVE-2014-0175 · GHSA-7v8f-rmc9-7586
mcollective has a default password set at install
Priority MEDIUM 46
mcollective has a default password set at install
3 records
mcollective has a default password set at install
MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.
Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with…