puppet vulnerabilities (RubyGems)

23 vulnerabilities.

• puppet RubyGems Unsafe HTTP Redirect in Puppet Agent and Puppet Server CVE-2021-27023 Fix available 9.8 CriticalNovember 18, 2021
• puppet RubyGems Silent Configuration Failure in Puppet Agent CVE-2021-27025 Fix available 6.5 MediumNovember 18, 2021
• puppet RubyGems Improper Certificate Validation in Puppet CVE-2020-7942 Fix available 6.5 MediumFebruary 19, 2020
• puppet RubyGems Tarball permission preservation in puppet CVE-2017-10689 Fix available 5.5 MediumDecember 31, 2017
• puppet RubyGems Puppet Improper Access Control CVE-2016-2785 Fix available 9.8 CriticalJune 10, 2016
• puppet RubyGems facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability CVE-2014-3248 Fix available 6.2 MediumJune 30, 2014
• puppet RubyGems Puppet does not properly restrict access to node resources CVE-2011-0528 Fix available 5.5 MediumFebruary 17, 2014
• puppet RubyGems Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service CVE-2013-4761 Fix available 5.1 MediumAugust 20, 2013
• puppet RubyGems Puppet Improper Input Validation vulnerability CVE-2013-3567 Fix available 7.5 HighJune 26, 2013
• puppet RubyGems Puppet Improper Input Validation vulnerability CVE-2013-1655 Fix available 7.5 HighMarch 12, 2013
• puppet RubyGems Puppet supports use of IP addresses in certnames without warning of potential risks CVE-2012-3408 Fix available 2.6 LowAugust 6, 2012
• puppet RubyGems Pupper does not properly restrict characters in Common Name field of Certificate Signing Request CVE-2012-3867 Fix available 4.3 MediumJuly 12, 2012
• puppet RubyGems Puppet allows local users to obtain sensitive configuration information CVE-2012-3866 Fix available 2.1 LowJuly 12, 2012
• puppet RubyGems Puppet vulnerable to Path Traversal CVE-2012-3865 Fix available 3.5 LowJuly 12, 2012
• puppet RubyGems Puppet allows local users to overwrite arbitrary files via a symlink attack CVE-2012-1989 Fix available 3.6 LowJune 27, 2012
• puppet RubyGems Puppet Arbitrary Command Execution CVE-2012-1988 Fix available 6.0 MediumApril 13, 2012
• puppet RubyGems Puppet Denial of Service and Arbitrary File Write CVE-2012-1987 Fix available 3.5 LowApril 13, 2012
• puppet RubyGems Puppet uses predictable filenames, allowing arbitrary file overwrite CVE-2012-1906 Fix available 3.3 LowApril 13, 2012
• puppet RubyGems Puppet Privilege Escallation CVE-2012-1053 Fix available 6.9 MediumFebruary 27, 2012
• puppet RubyGems Puppet uses predictable filenames, allowing arbitrary file overwrite CVE-2011-3871 Fix available 6.2 MediumSeptember 29, 2011
• puppet RubyGems Puppet allows local users to modify the permissions of arbitrary files CVE-2011-3870 Fix available 6.3 MediumSeptember 29, 2011
• puppet RubyGems Puppet arbitrary file overwrite CVE-2011-3869 Fix available 6.3 MediumSeptember 29, 2011
• puppet RubyGems Puppet arbitrary files overwrite via a symlink attack CVE-2010-0156 Fix available 3.3 LowMarch 3, 2010