Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-v9kt-4vxm-ekdw
Summary
Multiple vulnerabilities have been found in Puppet, the worst of
    which could lead to execution of arbitrary code.
Aliases
0
alias CVE-2012-6120
Fixed_packages
0
url pkg:deb/debian/puppet@2.6.4-2?distro=bullseye
purl pkg:deb/debian/puppet@2.6.4-2?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.4-2%3Fdistro=bullseye
1
url pkg:deb/debian/puppet@2.7.23-1~deb7u3
purl pkg:deb/debian/puppet@2.7.23-1~deb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18aq-72zg-3uc9
1
vulnerability VCID-3kma-3ffw-8qd9
2
vulnerability VCID-5g6u-uvej-xbad
3
vulnerability VCID-73uh-2gkm-6kgy
4
vulnerability VCID-7ypq-wmb7-quhc
5
vulnerability VCID-8xgm-pabz-hkeg
6
vulnerability VCID-bt3p-h1js-53gg
7
vulnerability VCID-fjbx-bqnn-2bf3
8
vulnerability VCID-kkve-dj7r-gue1
9
vulnerability VCID-wkb1-dm1m-67db
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.7.23-1~deb7u3
2
url pkg:deb/debian/puppet@5.5.22-2?distro=bullseye
purl pkg:deb/debian/puppet@5.5.22-2?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@5.5.22-2%3Fdistro=bullseye
3
url pkg:ebuild/app-admin/puppet@2.7.23
purl pkg:ebuild/app-admin/puppet@2.7.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-admin/puppet@2.7.23
Affected_packages
0
url pkg:deb/debian/puppet@0.20.1-1
purl pkg:deb/debian/puppet@0.20.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18aq-72zg-3uc9
1
vulnerability VCID-2jc8-n1j4-m7c6
2
vulnerability VCID-3kma-3ffw-8qd9
3
vulnerability VCID-3zzj-krc5-skea
4
vulnerability VCID-5g6u-uvej-xbad
5
vulnerability VCID-5qhd-8wfe-27dy
6
vulnerability VCID-72s2-y7m6-kuf6
7
vulnerability VCID-73uh-2gkm-6kgy
8
vulnerability VCID-75gs-2gu3-6udx
9
vulnerability VCID-7jtp-a1nw-bqfs
10
vulnerability VCID-7ypq-wmb7-quhc
11
vulnerability VCID-8xgm-pabz-hkeg
12
vulnerability VCID-a7cn-eqbq-qyb1
13
vulnerability VCID-absc-ndrs-yqep
14
vulnerability VCID-b94j-dcjk-eqeu
15
vulnerability VCID-bt3p-h1js-53gg
16
vulnerability VCID-fdk4-8wtn-nqct
17
vulnerability VCID-fjbx-bqnn-2bf3
18
vulnerability VCID-h88b-abes-3bgr
19
vulnerability VCID-jhkk-5euf-uked
20
vulnerability VCID-kkve-dj7r-gue1
21
vulnerability VCID-kt2h-k72f-tqc7
22
vulnerability VCID-nf2h-5vd2-6kb1
23
vulnerability VCID-pdpa-qfpq-zkcq
24
vulnerability VCID-pgg8-9sk2-57ee
25
vulnerability VCID-rfcx-7kc9-mbcr
26
vulnerability VCID-rrky-upea-nfd4
27
vulnerability VCID-sweb-hbec-k3ha
28
vulnerability VCID-tetf-xa1u-uffv
29
vulnerability VCID-txx3-3fzg-33cp
30
vulnerability VCID-v9kt-4vxm-ekdw
31
vulnerability VCID-vgbw-4yuu-57fz
32
vulnerability VCID-vrzs-81t1-jyax
33
vulnerability VCID-wage-71h9-6qay
34
vulnerability VCID-wdwr-8m6q-kff5
35
vulnerability VCID-wkb1-dm1m-67db
36
vulnerability VCID-ww8x-tzxr-4qbn
37
vulnerability VCID-yycs-ny3v-pyeh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.20.1-1
1
url pkg:deb/debian/puppet@0.24.5-3%2Blenny2
purl pkg:deb/debian/puppet@0.24.5-3%2Blenny2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18aq-72zg-3uc9
1
vulnerability VCID-2jc8-n1j4-m7c6
2
vulnerability VCID-3kma-3ffw-8qd9
3
vulnerability VCID-3zzj-krc5-skea
4
vulnerability VCID-5g6u-uvej-xbad
5
vulnerability VCID-5qhd-8wfe-27dy
6
vulnerability VCID-72s2-y7m6-kuf6
7
vulnerability VCID-73uh-2gkm-6kgy
8
vulnerability VCID-75gs-2gu3-6udx
9
vulnerability VCID-7jtp-a1nw-bqfs
10
vulnerability VCID-7ypq-wmb7-quhc
11
vulnerability VCID-8xgm-pabz-hkeg
12
vulnerability VCID-a7cn-eqbq-qyb1
13
vulnerability VCID-absc-ndrs-yqep
14
vulnerability VCID-b94j-dcjk-eqeu
15
vulnerability VCID-bt3p-h1js-53gg
16
vulnerability VCID-fdk4-8wtn-nqct
17
vulnerability VCID-fjbx-bqnn-2bf3
18
vulnerability VCID-h88b-abes-3bgr
19
vulnerability VCID-jhkk-5euf-uked
20
vulnerability VCID-kkve-dj7r-gue1
21
vulnerability VCID-kt2h-k72f-tqc7
22
vulnerability VCID-nf2h-5vd2-6kb1
23
vulnerability VCID-pdpa-qfpq-zkcq
24
vulnerability VCID-pgg8-9sk2-57ee
25
vulnerability VCID-rfcx-7kc9-mbcr
26
vulnerability VCID-rrky-upea-nfd4
27
vulnerability VCID-sweb-hbec-k3ha
28
vulnerability VCID-tetf-xa1u-uffv
29
vulnerability VCID-txx3-3fzg-33cp
30
vulnerability VCID-v9kt-4vxm-ekdw
31
vulnerability VCID-vgbw-4yuu-57fz
32
vulnerability VCID-vrzs-81t1-jyax
33
vulnerability VCID-wage-71h9-6qay
34
vulnerability VCID-wdwr-8m6q-kff5
35
vulnerability VCID-wkb1-dm1m-67db
36
vulnerability VCID-ww8x-tzxr-4qbn
37
vulnerability VCID-yycs-ny3v-pyeh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.24.5-3%252Blenny2
2
url pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze9
purl pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18aq-72zg-3uc9
1
vulnerability VCID-2jc8-n1j4-m7c6
2
vulnerability VCID-3kma-3ffw-8qd9
3
vulnerability VCID-3zzj-krc5-skea
4
vulnerability VCID-5g6u-uvej-xbad
5
vulnerability VCID-72s2-y7m6-kuf6
6
vulnerability VCID-73uh-2gkm-6kgy
7
vulnerability VCID-75gs-2gu3-6udx
8
vulnerability VCID-7jtp-a1nw-bqfs
9
vulnerability VCID-7ypq-wmb7-quhc
10
vulnerability VCID-8xgm-pabz-hkeg
11
vulnerability VCID-a7cn-eqbq-qyb1
12
vulnerability VCID-b94j-dcjk-eqeu
13
vulnerability VCID-bt3p-h1js-53gg
14
vulnerability VCID-fdk4-8wtn-nqct
15
vulnerability VCID-fjbx-bqnn-2bf3
16
vulnerability VCID-h88b-abes-3bgr
17
vulnerability VCID-jhkk-5euf-uked
18
vulnerability VCID-kkve-dj7r-gue1
19
vulnerability VCID-kt2h-k72f-tqc7
20
vulnerability VCID-nf2h-5vd2-6kb1
21
vulnerability VCID-pdpa-qfpq-zkcq
22
vulnerability VCID-pgg8-9sk2-57ee
23
vulnerability VCID-rfcx-7kc9-mbcr
24
vulnerability VCID-rrky-upea-nfd4
25
vulnerability VCID-sweb-hbec-k3ha
26
vulnerability VCID-tetf-xa1u-uffv
27
vulnerability VCID-txx3-3fzg-33cp
28
vulnerability VCID-v9kt-4vxm-ekdw
29
vulnerability VCID-vgbw-4yuu-57fz
30
vulnerability VCID-vrzs-81t1-jyax
31
vulnerability VCID-wage-71h9-6qay
32
vulnerability VCID-wdwr-8m6q-kff5
33
vulnerability VCID-wkb1-dm1m-67db
34
vulnerability VCID-yycs-ny3v-pyeh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze9
3
url pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze10
purl pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18aq-72zg-3uc9
1
vulnerability VCID-2jc8-n1j4-m7c6
2
vulnerability VCID-3kma-3ffw-8qd9
3
vulnerability VCID-3zzj-krc5-skea
4
vulnerability VCID-5g6u-uvej-xbad
5
vulnerability VCID-72s2-y7m6-kuf6
6
vulnerability VCID-73uh-2gkm-6kgy
7
vulnerability VCID-75gs-2gu3-6udx
8
vulnerability VCID-7jtp-a1nw-bqfs
9
vulnerability VCID-7ypq-wmb7-quhc
10
vulnerability VCID-8xgm-pabz-hkeg
11
vulnerability VCID-a7cn-eqbq-qyb1
12
vulnerability VCID-b94j-dcjk-eqeu
13
vulnerability VCID-bt3p-h1js-53gg
14
vulnerability VCID-fdk4-8wtn-nqct
15
vulnerability VCID-fjbx-bqnn-2bf3
16
vulnerability VCID-h88b-abes-3bgr
17
vulnerability VCID-jhkk-5euf-uked
18
vulnerability VCID-kkve-dj7r-gue1
19
vulnerability VCID-kt2h-k72f-tqc7
20
vulnerability VCID-nf2h-5vd2-6kb1
21
vulnerability VCID-pdpa-qfpq-zkcq
22
vulnerability VCID-pgg8-9sk2-57ee
23
vulnerability VCID-rfcx-7kc9-mbcr
24
vulnerability VCID-rrky-upea-nfd4
25
vulnerability VCID-sweb-hbec-k3ha
26
vulnerability VCID-tetf-xa1u-uffv
27
vulnerability VCID-txx3-3fzg-33cp
28
vulnerability VCID-v9kt-4vxm-ekdw
29
vulnerability VCID-vgbw-4yuu-57fz
30
vulnerability VCID-vrzs-81t1-jyax
31
vulnerability VCID-wage-71h9-6qay
32
vulnerability VCID-wdwr-8m6q-kff5
33
vulnerability VCID-wkb1-dm1m-67db
34
vulnerability VCID-yycs-ny3v-pyeh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze10
4
url pkg:rpm/redhat/puppet@2.6.18-1?arch=el6ost
purl pkg:rpm/redhat/puppet@2.6.18-1?arch=el6ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zzj-krc5-skea
1
vulnerability VCID-7jtp-a1nw-bqfs
2
vulnerability VCID-rfcx-7kc9-mbcr
3
vulnerability VCID-sweb-hbec-k3ha
4
vulnerability VCID-v9kt-4vxm-ekdw
5
vulnerability VCID-wdwr-8m6q-kff5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/puppet@2.6.18-1%3Farch=el6ost
References
0
reference_url http://rhn.redhat.com/errata/RHSA-2013-0710.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2013-0710.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6120.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6120.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-6120
reference_id
reference_type
scores
0
value 0.00042
scoring_system epss
scoring_elements 0.12823
published_at 2026-04-16T12:55:00Z
1
value 0.00042
scoring_system epss
scoring_elements 0.12968
published_at 2026-04-12T12:55:00Z
2
value 0.00042
scoring_system epss
scoring_elements 0.13059
published_at 2026-04-02T12:55:00Z
3
value 0.00042
scoring_system epss
scoring_elements 0.13111
published_at 2026-04-04T12:55:00Z
4
value 0.00042
scoring_system epss
scoring_elements 0.12914
published_at 2026-04-07T12:55:00Z
5
value 0.00042
scoring_system epss
scoring_elements 0.12994
published_at 2026-04-08T12:55:00Z
6
value 0.00042
scoring_system epss
scoring_elements 0.13045
published_at 2026-04-09T12:55:00Z
7
value 0.00042
scoring_system epss
scoring_elements 0.13007
published_at 2026-04-11T12:55:00Z
8
value 0.00042
scoring_system epss
scoring_elements 0.12923
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-6120
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6120
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=908629
reference_id 908629
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=908629
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openstack_essex:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:redhat:openstack_essex:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openstack_essex:-:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openstack_folsom:-:*:*:*:*:*:*:*
reference_id cpe:2.3:a:redhat:openstack_folsom:-:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openstack_folsom:-:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-6120
reference_id CVE-2012-6120
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:N/C:P/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2012-6120
8
reference_url https://security.gentoo.org/glsa/201308-04
reference_id GLSA-201308-04
reference_type
scores
url https://security.gentoo.org/glsa/201308-04
9
reference_url https://access.redhat.com/errata/RHSA-2013:0710
reference_id RHSA-2013:0710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0710
Weaknesses
0
cwe_id 264
name Permissions, Privileges, and Access Controls
description Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Exploits
Severity_range_score2.1 - 2.1
Exploitability0.5
Weighted_severity1.9
Risk_score0.9
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-v9kt-4vxm-ekdw