TI-2022-03026 CVE-2022-3276 · GHSA-6wx8-c453-jp55
Puppetlabs-mysql Command Injection
Priority MEDIUM 41
Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0.
3 records
Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0.
Command injection is possible in the puppetlabs-apt module prior to version 9.0.0.
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask.