Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/facter@2.2.0-1
purl pkg:deb/debian/facter@2.2.0-1
Next non-vulnerable version 2.4.6-1~bpo8+1
Latest non-vulnerable version 2.4.6-1~bpo8+1
Risk 1.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-hzac-k56d-w3cg
Aliases:
CVE-2015-1426
GHSA-j436-h7hm-rx46
Exposure of Sensitive Information to an Unauthorized Actor Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
2.4.6-1~bpo8+1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-15T15:41:26.389877+00:00 Debian Oval Importer Affected by VCID-hzac-k56d-w3cg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-11T15:29:15.315795+00:00 Debian Oval Importer Affected by VCID-hzac-k56d-w3cg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T15:23:34.347180+00:00 Debian Oval Importer Affected by VCID-hzac-k56d-w3cg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0