puppet vulnerabilities (Debian)
40 vulnerabilities.
-
puppetDebian Unsafe HTTP Redirect in Puppet Agent and Puppet Server 9.8 Critical -
puppetDebian Silent Configuration Failure in Puppet Agent 6.5 Medium -
puppetDebian Improper Certificate Validation in Puppet 6.5 Medium -
puppetDebian Tarball permission preservation in puppet 5.5 Medium -
puppetDebian Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP)... 9.8 Critical -
puppetDebian Puppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow... 7.2 High -
puppetDebian Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the... 8.2 High -
puppetDebian The default vhost configuration file in Puppet before 3.6.2 does not include the... 6.5 Medium -
puppetDebian Puppet does not properly restrict access to node resources 5.5 Medium -
puppetDebian Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3... 2.1 Low -
puppetDebian Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and... 3.6 Low -
puppetDebian Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service 5.1 Medium -
puppetDebian Puppet Improper Input Validation vulnerability 7.5 High -
puppetDebian Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable... 2.1 Low -
puppetDebian The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x... 4.0 Medium -
puppetDebian Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated... 6.5 Medium -
puppetDebian Puppet Improper Input Validation vulnerability 7.5 High -
puppetDebian Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does... 5.0 Medium -
puppetDebian Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1... 7.1 High -
puppetDebian Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1... 4.9 Medium -
puppetDebian The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18,... 9.0 High -
puppetDebian Puppet supports use of IP addresses in certnames without warning of potential risks 2.6 Low -
puppetDebian Pupper does not properly restrict characters in Common Name field of Certificate Signing Request 4.3 Medium -
puppetDebian Puppet allows local users to obtain sensitive configuration information 2.1 Low -
puppetDebian Puppet vulnerable to Path Traversal 3.5 Low -
puppetDebian Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote... 4.0 Medium -
puppetDebian Puppet allows local users to overwrite arbitrary files via a symlink attack 3.6 Low -
puppetDebian Puppet Arbitrary Command Execution 6.0 Medium -
puppetDebian Puppet Denial of Service and Arbitrary File Write 3.5 Low -
puppetDebian Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1... 2.1 Low -
puppetDebian Puppet uses predictable filenames, allowing arbitrary file overwrite 3.3 Low -
puppetDebian Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1... 4.4 Medium -
puppetDebian Puppet Privilege Escallation 6.9 Medium -
puppetDebian Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and... 2.6 Low -
puppetDebian Puppet uses predictable filenames, allowing arbitrary file overwrite 6.2 Medium -
puppetDebian Puppet allows local users to modify the permissions of arbitrary files 6.3 Medium -
puppetDebian Puppet arbitrary file overwrite 6.3 Medium -
puppetDebian Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows... 5.0 Medium -
puppetDebian Puppet arbitrary files overwrite via a symlink attack 3.3 Low -
puppetDebian puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a... 4.7 Medium