Puppet vulnerabilities, page 3
130 vulnerabilities
Known vulnerabilities in Puppet products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 42 products.
CVE-2013-4761debianpuppet+4
EPSS score1.64%
Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: this vulnerability can only be exploited utilizing unspecified "local file system access" to the Puppet Master.CVE-2013-4971puppetpuppet_enterpriseEPSS score1.17%
Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors.CVE-2013-4955puppetpuppet_enterpriseEPSS score1.13%
Open redirect vulnerability in the login page in Puppet Enterprise before 3.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the service parameter.CVE-2013-3567canonicalubuntu_linux+10EPSS score3.41%
Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.CVE-2021-27018ubuntupuppet+1EPSS score0.54%
The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source.CVE-2021-27026puppetpuppet+2EPSS score0.25%
A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be loggedCVE-2021-27023debianpuppet+10EPSS score1.37%
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007CVE-2021-27021debianpuppetdb+4EPSS score1.26%
A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.CVE-2021-27025debianpuppet+9EPSS score1.11%
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.CVE-2021-27020ubuntupuppet+1EPSS score1.06%
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.CVE-2021-27022ubuntupuppet+2EPSS score0.92%
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).CVE-2021-27019debianpuppetdb+3EPSS score0.74%
PuppetDB logging included potentially sensitive system information.CVE-2021-27024puppetcontinuous_deliveryEPSS score0.82%
A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0CVE-2015-1029debianpuppet-module-puppetlabs-stdlib+2EPSS score1.65%
The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or obtain sensitive information by prepopulating the fact cache.CVE-2015-1855debianruby1.8+11EPSS score2.81%
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.CVE-2015-1426debianfacter+4EPSS score0.35%
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.CVE-2015-4100puppetpuppet_enterpriseEPSS score0.70%
Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability."CVE-2015-7328puppetpuppet_enterpriseEPSS score0.17%
Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during the initial installation and configuration, which might allow local users to obtain sensitive information via unspecified vectors.CVE-2015-7224debianpuppet-module-puppetlabs-mysql+1EPSS score1.68%
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask.CVE-2015-7330puppetpuppet_enterpriseEPSS score2.06%
Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol.