PU
Product
Puppet
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 7Low 0
Watch
Add Puppet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27021 | 8.8 | Jul 20 | A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query Affected: before 6.23.0; 7.7.0 before 7.8.0 |
| CVE-2018-6513 | 8.8 | Jun 11 | Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13,… Affected: 1.10.0 before 1.10.13; 5.3.0 before 5.3.7; 5.5.0 before 5.5.2 |
| CVE-2017-2295 | 8.2 | Jul 5 | Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format Affected: through 4.10.0 |
| CVE-2018-6515 | 7.8 | Jun 11 | Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted configuration file an… Affected: 1.10.0 before 1.10.13; 5.3.0 before 5.3.7; 5.5.0 before 5.5.2 |
| CVE-2018-6514 | 7.8 | Jun 11 | In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which… Affected: 1.10.0 before 1.10.13; 5.3.0 before 5.3.7; 5.5.0 before 5.5.2 |
Showing 5