Puppet Puppet Agent
6 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-7942 | 5.5.x prior to 5.5.19 ; Fixed in 5.5.19 ; 6.x prior to 6.13.0 ; … | Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom | MEDIUM 6.5 | 0.8 % | ||
| CVE-2018-6515 | Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2 | Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a speci | HIGH 7.8 | 0.8 % | ||
| CVE-2018-6514 | Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2 | In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerab | HIGH 7.8 | 0.8 % | ||
| CVE-2017-10690 | 5.x prior to 5.3.4 | In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retri | MEDIUM 6.5 | 1.0 % | ||
| CVE-2017-10689 | prior to 5.3.4 or 1.10.10 | In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 inc | MEDIUM 5.5 | 0.4 % | ||
| CVE-2016-5713 | Introduced in 1.3.0, fixed in 1.6.0 | Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables th | CRITICAL 9.8 | 2.0 % |