Search for packages
| purl | pkg:deb/debian/puppet@0?distro=bullseye |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1dbs-z8sn-e3fv | Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during the initial installation and configuration, which might allow local users to obtain sensitive information via unspecified vectors. |
CVE-2015-7328
|
| VCID-37yk-3v22-4qg7 | The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. Affected releases are Puppet Enterprise: 2018.1.x versions prior to 2018.1.1 and razor-server and pe-razor-server prior to 1.9.0.0. |
CVE-2018-6512
|
| VCID-3jdp-jh74-37c6 | Puppet Enterprise before 3.0.1 does not use a session timeout, which makes it easier for attackers to gain privileges by leveraging an unattended workstation. |
CVE-2013-4958
|
| VCID-4tw7-zg73-q3cd | A privilege escalation allowing remote code execution was discovered in the orchestration service. |
CVE-2023-2530
|
| VCID-56xc-5fxu-kka3 | Puppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out, which might allow remote attackers to hijack sessions by obtaining an old session ID. |
CVE-2013-4762
|
| VCID-5uhz-zcuf-4uej | The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console. |
CVE-2013-4966
|
| VCID-6vjt-rsq7-ekc9 | Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) node request management, (2) live management, and (3) user administration components in the console in Puppet Enterprise (PE) before 2.7.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. |
CVE-2013-1399
|
| VCID-729g-ky6n-1yfg | The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote authenticated users to obtain sensitive information and gain privileges by leveraging root access to a node, related to the master role. |
CVE-2013-1398
|
| VCID-7kzg-339v-vqbs | Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors. |
CVE-2012-5158
|
| VCID-82mm-jjnu-sbfa | In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2. |
CVE-2017-2296
|
| VCID-84e7-2rxq-b7e1 | A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes). |
CVE-2021-27022
|
| VCID-92u1-6e9d-tqga | Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting a (1) report, (2) group, or (3) class or possibly have other unspecified impact. |
CVE-2013-4963
|
| VCID-a1p5-fyr1-wuaq | Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes. |
CVE-2013-4967
|
| VCID-bccx-uph7-67cj | A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Orchestrator. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6. |
CVE-2018-6510
|
| VCID-bjts-v9q2-9yg8 | several |
CVE-2013-4073
GHSA-3gpq-xx45-4rr9 OSV-94628 |
| VCID-bqtz-8vkk-xbg6 | puppet: Puppet Server ReDoS |
CVE-2023-1894
|
| VCID-bsa9-fu5y-p7at | A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Puppet Enterprise Console. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6. |
CVE-2018-6511
|
| VCID-bu53-ez2r-vfcr | Puppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger products in its HTTP response headers, which allows remote attackers to obtain sensitive information. |
CVE-2013-4961
|
| VCID-d6vw-w8g1-q7fk | Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability." |
CVE-2015-4100
|
| VCID-dnjn-tqgb-g7fs | Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. |
CVE-2013-4964
|
| VCID-eggd-sxe6-dbh3 | Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the redirect parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6501. |
CVE-2016-5715
|
| VCID-ekj3-h7sp-33fg | Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack. |
CVE-2013-4965
|
| VCID-eqmw-4ast-tqc3 | Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors. |
CVE-2013-4971
|
| VCID-he38-9hxb-9ycb | Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens. |
CVE-2017-2297
|
| VCID-hexs-rr6c-pqap | puppet-agent: Deserialization of untrusted data |
CVE-2021-27017
|
| VCID-muyn-v1ah-27br | When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server. This affects Puppet Enterprise 2018.1.3, 2017.3.9, and 2016.4.14, and is fixed in Puppet Enterprise 2018.1.4, 2017.3.10, and 2016.4.15. It scored an 8.5 CVSS score. |
CVE-2018-11749
|
| VCID-mv4z-k16a-hfgr | Puppet Enterprise before 3.7.1 allows remote authenticated users to obtain licensing and certificate signing request information by leveraging access to an unspecified API endpoint. |
CVE-2014-9355
|
| VCID-mz9n-ttkc-bfhx | The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2. |
CVE-2016-9686
|
| VCID-n8dt-ef15-wfgv | puppet-agent: pxp-agent attempts to configure OpenSSL from uncontrolled location |
CVE-2018-6515
|
| VCID-p3cs-jvy5-pyda | Multiple vulnerabilities have been found in Puppet Server and Agent, the worst of which could lead to arbitrary code execution. |
CVE-2016-2786
|
| VCID-pj4s-vjbb-u7h7 | Improper Access Control Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding. |
CVE-2016-2785
GHSA-pqj5-7r86-64fv |
| VCID-prfa-kwxa-hya6 | puppet: Denial of Service for Revocation of Auto Renewed Certificates |
CVE-2023-5255
|
| VCID-qs9z-st4f-gkcq | Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes. |
CVE-2014-3249
|
| VCID-rqbn-6eng-tyhs | Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2, were vulnerable to an attack where an unprivileged user on Windows agents could write custom facts that can escalate privileges on the next puppet run. This was possible through the loading of shared libraries from untrusted paths. |
CVE-2018-6513
|
| VCID-rt19-c3m9-yyfx | Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspecified vectors related to "live management." |
CVE-2013-4968
|
| VCID-s3wm-tmvz-tbhj | Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export. |
CVE-2021-27020
|
| VCID-s8jz-vr9t-87dy | The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors. |
CVE-2016-2787
|
| VCID-sd5c-wx86-t3c1 | Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain sensitive information such as (1) host name, (2) MAC address, and (3) SSH keys via the web browser cache. |
CVE-2013-4959
|
| VCID-sqqa-bcxy-9uht | Open redirect vulnerability in the login page in Puppet Enterprise before 3.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the service parameter. |
CVE-2013-4955
|
| VCID-txcc-y6jy-q7a6 | Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this functionality can change this policy. |
CVE-2017-2293
|
| VCID-u5hk-xgp2-4qea | On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation. |
CVE-2018-6516
|
| VCID-u983-ve5j-gkgr | The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument. |
CVE-2015-7331
|
| VCID-ugqt-zyga-1ydy | puppet: puppet server and puppetDB may leak sensitive information via metrics API |
CVE-2020-7943
|
| VCID-v1kq-tkfx-bycx | The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors. |
CVE-2013-4962
|
| VCID-v61q-45uv-uuf7 | puppet-agent: Puppet Agent does not properly verify SSL connection when downloading a CRL |
CVE-2018-11751
|
| VCID-vyk2-e5pa-bff3 | Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter. |
CVE-2015-6501
|
| VCID-wnjy-ggeb-eqcn | puppet: Environment leakage in puppet-agent |
CVE-2017-10690
|
| VCID-xqap-n8rp-g7fn | Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 failed to mark MCollective server private keys as sensitive (a feature added in Puppet 4.6), so key values could be logged and stored in PuppetDB. These releases use the sensitive data type to ensure this won't happen anymore. |
CVE-2017-2294
|
| VCID-y3ft-rkcs-7kg2 | The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code execution on the console node. |
CVE-2016-5716
|