MC
Product
Mcollective
by Puppet · last CVE Jun 30, 2017
1
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add Mcollective to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-2292
9.0
2%
Jun 30
Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential for arbitrary code execution on the server
Affected: through 2.10.3
Showing 1