RSS   Podatności dla 'Puppet agent'   RSS

2017-10-18
 
CVE-2016-5714

CWE-284
 
 
Puppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow remote attackers to bypass a host whitelist protection mechanism and execute arbitrary code on Puppet nodes via vectors related to command validation, aka "Puppet Execution Protocol (PXP) Command Whitelist Validation Vulnerability."

 
2016-06-10
 
CVE-2016-2786

CWE-20
 
 
The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote attackers to spoof brokers and execute arbitrary commands via a crafted certificate.

 
 
CVE-2016-2785

 
 
Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding.

 

 >>> Vendor: Puppetlabs 15 Produkty
Puppet
Puppet enterprise users
Puppet enterprise
Puppet dashboard
Mcollective
Facter
Hiera
Marionette-collective
Puppet server
Stdlib
Rabbitmq
Puppetlabs-rabbitmq
Puppet agent
Mcollective-puppet-agent
Mcollective-sshkey-security

Copyright 2024, cxsecurity.com

 

Back to Top