RSS   Vulnerabilities for 'Chloride'   RSS

2019-03-21
 
CVE-2018-6517

CWE-295
 

 
Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's known_hosts file without confirmation. In version 0.3.0 this is updated so that the user's known_hosts file is not updated by chloride.

 

 >>> Vendor: Puppet 19 Products
Discovery
Enterprise
Firewall
Puppet
Puppet enterprise
Puppet dashboard
Mcollective
Facter
Hiera
Puppet server
Stdlib
Puppet agent
Puppetlabs-apache
Chloride
Marionette collective
Continuous delivery
Puppetdb
Remediate
Puppet connect


Copyright 2024, cxsecurity.com

 

Back to Top