Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Puppetlabs Component: Puppet Enterprise Users Clear all filters
TI-2012-01760 CVE-2012-1986 · GHSA-2crf-gcjf-2wmp

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0…

Priority LOW 14

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and certain permissions on…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01453 Published 2012-05-29 Partial fix CWE-264
TI-2012-01685 CVE-2012-1906 · GHSA-c4mc-49hq-q275

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0…

Priority LOW 16

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, whic…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.0035 Published 2012-05-29 Fixed in 2.6.15, 2.7.13 CWE-264
TI-2012-00961 CVE-2012-1053 · GHSA-77hg-g8cc-5r37

The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet…

Priority LOW 31

The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly man…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00384 Published 2012-05-29 Partial fix · 2.6.14, 2.7.11 CWE-264