mcollective vulnerabilities (Debian)
6 vulnerabilities.
-
mcollectiveDebian mcollective has a default password set at install 9.8 Critical -
mcollectiveDebian Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load,... 9.0 Critical -
mcollectiveDebian MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers... 9.8 Critical -
mcollectiveDebian The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective... 4.4 Medium -
mcollectiveDebian facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability 6.2 Medium -
mcollectiveDebian openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world... 2.1 Low