puppetserver vulnerabilities (Red Hat)
196 vulnerabilities.
puppetserverRed HatUnsafe HTTP Redirect in Puppet Agent and Puppet Server9.8 CriticalpuppetserverRed HatSilent Configuration Failure in Puppet Agent6.5 MediumpuppetserverRed HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 HighpuppetserverRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 MediumpuppetserverRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 MediumpuppetserverRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 MediumpuppetserverRed HatXSS in Action View5.4 MediumpuppetserverRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 HighpuppetserverRed HatUntrusted users can run pending migrations in production in Rails6.5 MediumpuppetserverRed HatCSRF Vulnerability in rails-ujs6.5 MediumpuppetserverRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 HighpuppetserverRed HatDeserialization of untrusted data in Jackson Databind8.1 HighpuppetserverRed HatDeserialization of untrusted data in Jackson Databind8.1 HighpuppetserverRed HatDeserialization of untrusted data in Jackson Databind8.1 HighpuppetserverRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 HighpuppetserverRed HatAbility to forge per-form CSRF tokens in Rails4.3 MediumpuppetserverRed HatCircumvention of file size limits in ActiveStorage7.5 HighpuppetserverRed HatPossible Strong Parameters Bypass in ActionPack7.5 HighpuppetserverRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 CriticalpuppetserverRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 HighpuppetserverRed HatImproper Input Validation in Hibernate Validator5.3 MediumpuppetserverRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 HighpuppetserverRed HatDenial of Service in Netty7.5 HighpuppetserverRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighpuppetserverRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighpuppetserverRed HatPossible XSS vulnerability in ActionView4.0 MediumpuppetserverRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 HighpuppetserverRed HatSQL injection in Django8.8 HighpuppetserverRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalpuppetserverRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalpuppetserverRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalpuppetserverRed HatImproper Certificate Validation in Puppet6.5 MediumpuppetserverRed HatDeserialization of Untrusted Data in jackson-databind9.8 CriticalpuppetserverRed HatHTTP Request Smuggling in Netty7.5 HighpuppetserverRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumpuppetserverRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumpuppetserverRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 MediumpuppetserverRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 MediumpuppetserverRed HatKatello cleartext password storage issue4.1 MediumpuppetserverRed HatDouble Free in psutil7.5 HighpuppetserverRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 MediumpuppetserverRed HatApache MINA SSLFilter security Issue7.5 HighpuppetserverRed HatInsecure Deserialization in Apache Commons Beanutils7.3 HighpuppetserverRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 MediumpuppetserverRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 MediumpuppetserverRed HatTwisted CRLF Injection6.1 MediumpuppetserverRed HatInformation exposure in FasterXML jackson-databind7.5 HighpuppetserverRed HatIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 MediumpuppetserverRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 MediumpuppetserverRed HatJinja2 sandbox escape vulnerability8.6 High- Show moreLoading…