Skip to content
OpenAdvisories

Archive

6 August 2012

Vulnerabilities first published on this day (UTC), newest first.

← July 2012 2012 / August /6 September 2012 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 663
  7. 720
  8. 812
  9. 96
  10. 107
  11. 11 
  12. 1235
  13. 1356
  14. 1438
  15. 1552
  16. 1623
  17. 1720
  18. 18 
  19. 197
  20. 2037
  21. 2117
  22. 2235
  23. 2330
  24. 244
  25. 2555
  26. 2665
  27. 2719
  28. 2812
  29. 2947
  30. 3017
  31. 3158
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    CVE-2012-3866

    Puppet allows local users to obtain sensitive configuration information

    lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server t…

    puppet puppet Debian RubyGems
  • Low —
    CVE-2012-3865

    Puppet vulnerable to Path Traversal

    Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppe…

    puppet puppet Debian RubyGems
  • Low —
    CVE-2012-3408

    Puppet supports use of IP addresses in certnames without warning of potential risks

    lib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, supports use of IP addresses in certnames without warning of potential risks, which might allow remote attackers to spoof an agent by acquiring a previously used IP a…

    puppet puppet Debian RubyGems