MC
Product
Marionette Collective
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch
Add Marionette Collective to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0175 | 9.8 | Dec 13 | mcollective has a default password set at install Affected: All versions, or not specified |
| CVE-2016-2788 | 9.8 | Feb 13 | MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command Affected: 2.7.0; 2.8.0; 2.8.1; 2.8.2; 2.8.3; 2.8.4; +4 more |
| CVE-2014-3248 | – | Nov 16 | Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and… Affected: before 2.5.2 |
Showing 3