Latest vulnerabilities for "puppetlabs puppet"

8.5

First published (updated )

CVE-2013-1398

Puppet Puppet EnterpriseCSRF

6.8

First published (updated )

CVE-2013-1399

Puppet Puppet EnterprisePuppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret ha…

4

First published (updated )

CVE-2012-5158

Canonical Ubuntu LinuxPuppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.…

2.1

First published (updated )

CVE-2013-4969

Puppet PuppetPuppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet E…

3.6

First published (updated )

CVE-2013-4956

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Puppet PuppetUnspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterpris…

5.1

First published (updated )

CVE-2013-4761

Puppetlabs PuppetInput Validation

7.5

First published (updated )

CVE-2013-3567

Puppetlabs PuppetPuppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client conf…

5

First published (updated )

CVE-2013-2716

Puppet PuppetPuppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated user…

6.5

First published (updated )

CVE-2013-2274

Puppet PuppetPuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.…

4.9

First published (updated )

CVE-2013-1652

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Puppet PuppetPuppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does no…

5

First published (updated )

CVE-2013-1654

Puppet PuppetPuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.…

7.1

First published (updated )

CVE-2013-1653

Puppet PuppetInput Validation

7.5

First published (updated )

CVE-2013-1655

Puppet PuppetThe default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before …

4

First published (updated )

CVE-2013-2275

Puppet Puppet Enterpriselib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, support…

2.6

First published (updated )

CVE-2012-3408

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Puppet PuppetInput Validation

4.3

First published (updated )

CVE-2012-3867

Puppet Puppetlib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 …

2.1

First published (updated )

CVE-2012-3866

Puppet PuppetPath Traversal

3.5

First published (updated )

CVE-2012-3865

Puppet PuppetInfoleak

4

First published (updated )

CVE-2012-3864

Puppet Puppettelnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise (PE) 1.2.x, 2.0.x, and 2.5.x before 2.…

3.6

First published (updated )

CVE-2012-1989

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Puppet PuppetThe change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.…

6.9

First published (updated )

CVE-2012-1053

Puppet PuppetPuppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x…

4.4

First published (updated )

CVE-2012-1054

Puppet PuppetPuppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x…

3.3

First published (updated )

CVE-2012-1906

Puppet PuppetPuppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x…

2.1

First published (updated )

CVE-2012-1986

Puppet PuppetUnspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterpri…

3.5

First published (updated )

CVE-2012-1987

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Puppet PuppetCommand Injection, OS Command Injection

6

First published (updated )

CVE-2012-1988

Puppet PuppetPuppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary…

6.3

First published (updated )

CVE-2011-3869

Puppet PuppetPath Traversal

5

First published (updated )

CVE-2011-3848

Puppet PuppetInput Validation

2.6

First published (updated )

CVE-2011-3872

Puppet PuppetPuppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissi…

6.3

First published (updated )

CVE-2011-3870

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Puppet PuppetPuppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a pred…