Login Request a demo
PA
Product
Puppet Agent
by Puppet · last CVE Nov 18, 2021
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 4High 1Medium 3Low 0
Severity
All severities8Critical4High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Puppet Agent to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-27023
9.8
1%
Nov 18
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host
Affected: before 6.25.1; 7.0.0 before 7.12.1
CVE-2016-5713
9.8
2%
Dec 6
Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs
Affected: 1.3.0 before 1.6.0
CVE-2016-2786
9.8
2%
Jun 10
The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote…
Affected: 1.3.0; 1.3.1; 1.3.2; 1.3.4; 1.3.5
CVE-2016-2785
9.8
3%
Jun 10
Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access…
Affected: 1.4.1
Showing 4