| Puppet Denial of Service and Arbitrary File WriteCVE-2012-1987 · GHSA-V58W-6XC2-W799 |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Puppet arbitrary files overwrite via a symlink attackCVE-2010-0156 · GHSA-VRH7-99JH-3FMM |
puppet |
RubyGems |
کم
|
اصلاح گزارش شده |
|
| Puppet Arbitrary Command ExecutionCVE-2012-1988 · GHSA-6XXQ-J39W-G3F6 |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet allows local users to modify the permissions of arbitrary filesCVE-2011-3870 · GHSA-QH3G-27JF-3J54 |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet uses predictable filenames, allowing arbitrary file overwriteCVE-2011-3871 · GHSA-MPMX-GM5V-Q789 |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerabilityCVE-2014-3248 · GHSA-92V7-PQ4H-58J5 |
Red Hat OpenStack Platform 3/puppetfacter |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet does not properly restrict access to node resourcesCVE-2011-0528 · GHSA-9PVX-FWWH-W289 |
puppet |
RubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet arbitrary file overwriteCVE-2011-3869 · GHSA-8C56-V25W-F89C |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet allows local users to overwrite arbitrary files via a symlink attackCVE-2012-1989 · GHSA-C5QQ-G673-5P49 |
puppet |
RubyGems |
کم
|
اصلاح گزارش شده |
|
| Puppet Improper Input Validation vulnerabilityCVE-2013-1655 · GHSA-574Q-FXFJ-WV6H |
puppet |
RubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Puppet supports use of IP addresses in certnames without warning of potential risksCVE-2012-3408 · GHSA-VXF6-W9MP-95HM |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Pupper does not properly restrict characters in Common Name field of Certificate Signing RequestCVE-2012-3867 · GHSA-Q44R-F2HM-V76V |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet allows local users to obtain sensitive configuration informationCVE-2012-3866 · GHSA-8JXJ-9R5F-W3M2 |
puppet |
RubyGems |
کم
|
اصلاح گزارش شده |
|
| Silent Configuration Failure in Puppet AgentCVE-2021-27025 · GHSA-Q4G7-JRXV-67R9 |
Red Hat OpenStack Platform 10 (Newton)/puppetRed Hat OpenStack Platform 13 (Queens)/puppet |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type serviceCVE-2013-4761 · GHSA-CJ43-9H3W-V976 |
CloudForms Management Engine 5/puppetRed Hat Enterprise MRG 1/puppet |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet Improper Input Validation vulnerabilityCVE-2013-3567 · GHSA-F7P5-W2CR-7CP7 |
Red Hat OpenStack Platform 4/puppetRed Hat Subscription Asset Manager/puppet |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Unsafe HTTP Redirect in Puppet Agent and Puppet ServerCVE-2021-27023 · GHSA-93J5-G845-9WQP |
puppet |
RubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet vulnerable to Path TraversalCVE-2012-3865 · GHSA-G89M-3WJW-H857 |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
کم
|
اصلاح گزارش شده |
|
| Puppet Privilege EscallationCVE-2012-1053 · GHSA-77HG-G8CC-5R37 |
Red Hat Enterprise MRG 1/puppetpuppet |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Puppet uses predictable filenames, allowing arbitrary file overwriteCVE-2012-1906 · GHSA-C4MC-49HQ-Q275 |
puppet |
RubyGems |
متوسط
|
اصلاح گزارش شده |
|
