RSS   Vulnerabilities for 'Chloride'   RSS

2019-03-21
 
CVE-2018-6517

CWE-295
 

 
Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's known_hosts file without confirmation. In version 0.3.0 this is updated so that the user's known_hosts file is not updated by chloride.

 

 >>> Vendor: Puppet 19 Products
Puppet
Mcollective
Enterprise
Puppetlabs-apache
Chloride
Puppet enterprise
Puppet dashboard
Hiera
Marionette collective
Puppet server
Stdlib
Facter
Discovery
Puppet agent
Continuous delivery
Puppetdb
Remediate
Puppet connect
Firewall


Copyright 2024, cxsecurity.com

 

Back to Top