Skip to content
OpenAdvisories

Package · Debian

facter

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low —
    CVE-2015-1426

    Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata

    Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.

    facter facter facter Debian Ubuntu RubyGems
  • Medium —
    CVE-2014-3248

    facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability

    Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local us…

    puppet puppet mcollective facter Debian Ubuntu RubyGems