Red Hat Subscription Asset Manager/puppet

Red Hat · Package

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type serviceCVE-2013-4761 · GHSA-CJ43-9H3W-V976	CloudForms Management Engine 5/puppet Red Hat Enterprise MRG 1/puppet	Red HatRubyGems	Medium	Fix reported	2024-11-29
Puppet Improper Input Validation vulnerabilityCVE-2013-3567 · GHSA-F7P5-W2CR-7CP7	Red Hat OpenStack Platform 4/puppet Red Hat Subscription Asset Manager/puppet	Red HatRubyGems	High	Fix reported	2024-11-29
Puppet: Directory /var/log/puppet is world readableCVE-2012-6120	Red Hat Enterprise MRG 1/puppet Red Hat Subscription Asset Manager/puppet	Red Hat	Low	No fix reported	Not recorded
Puppet: default auth.conf allows authenticated node to submit a report for any other nodeCVE-2013-2275	Red Hat Subscription Asset Manager/puppet	Red Hat	Medium	No fix reported	Not recorded
Puppet: HTTP GET request catalog retrievalCVE-2013-1652	Red Hat Subscription Asset Manager/puppet	Red Hat	Medium	No fix reported	Not recorded
Puppet: catalog request code executionCVE-2013-1640	Red Hat Subscription Asset Manager/puppet	Red Hat	High	No fix reported	Not recorded
Puppet: HTTP PUT report saving code execution vulnerabilityCVE-2013-2274	Red Hat Subscription Asset Manager/puppet	Red Hat	High	No fix reported	Not recorded
Puppet: SSL protocol downgradeCVE-2013-1654	Red Hat Enterprise MRG 1/puppet Red Hat Subscription Asset Manager/puppet	Red Hat	Low	No fix reported	Not recorded
Puppet: Unsafe use of Temp files in File typeCVE-2013-4969	Red Hat Enterprise MRG 1/puppet Red Hat OpenStack Platform 3/puppet	Red Hat	Low	No fix reported	Not recorded
puppet: Unsafe YAML deserializationCVE-2017-2295	Red Hat Ceph Storage 1.3/puppet Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/puppet	Red Hat	High	No fix reported	Not recorded