puppet vulnerabilities (Red Hat)
30 vulnerabilities.
-
puppetRed Hat Silent Configuration Failure in Puppet Agent 6.5 Medium -
puppetRed Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... 6.5 Medium -
puppetRed Hat Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after. 6.1 Medium -
puppetRed Hat Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the... 8.1 High -
puppetRed Hat client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer... 7.5 High -
puppetRed Hat pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate... 5.5 Medium -
puppetRed Hat The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or... 7.1 High -
puppetRed Hat The Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world... 5.5 Medium -
puppetRed Hat Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman... 8.8 High -
puppetRed Hat Moderate severity vulnerability that affects org.apache.qpid:proton-j 6.5 Medium -
puppetRed Hat CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94... 4.3 Medium -
puppetRed Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... 6.0 Medium -
puppetRed Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... 5.0 Medium -
puppetRed Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... 4.0 Medium -
puppetRed Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... 5.0 Medium -
puppetRed Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... 4.3 Medium -
puppetRed Hat Rack vulnerable to Denial of Service via large parameter depth request 5.0 Medium -
puppetRed Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks 4.3 Medium -
puppetRed Hat Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome... 7.5 High -
puppetRed Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces 5.8 Medium -
puppetRed Hat Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and... 3.6 Low -
puppetRed Hat Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service 5.1 Medium -
puppetRed Hat Puppet Improper Input Validation vulnerability 7.5 High -
puppetRed Hat Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable... 2.1 Low -
puppetRed Hat The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x... 4.0 Medium -
puppetRed Hat Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated... 6.5 Medium -
puppetRed Hat Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does... 5.0 Medium -
puppetRed Hat Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1... 4.9 Medium -
puppetRed Hat The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18,... 9.0 High -
puppetRed Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol 5.8 Medium