CVE-2014-0175: Critical severity puppet mcollective vulnerability
mcollective has a default password set at install
Affected Software
Event History
Frequently Asked Questions
What is CVE-2014-0175?
CVE-2014-0175 is a vulnerability in mcollective where a default password is set at install.
How severe is CVE-2014-0175?
CVE-2014-0175 has a severity rating of 9.8 out of 10, indicating a critical vulnerability.
Which software is affected by CVE-2014-0175?
The affected software includes mcollective, Puppet Marionette Collective, IBM Robotic Process Automation as a Service, and Debian Linux.
How can I fix CVE-2014-0175?
To fix CVE-2014-0175, you should update mcollective to version 2.12.6 or later.
Where can I find more information about CVE-2014-0175?
You can find more information about CVE-2014-0175 at the following references: [https://security-tracker.debian.org/tracker/CVE-2014-0175](https://security-tracker.debian.org/tracker/CVE-2014-0175), [https://access.redhat.com/security/cve/cve-2014-0175](https://access.redhat.com/security/cve/cve-2014-0175), [https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0175](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0175).