Package · Debian

mcollective

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

Unscored —

CVE-2014-0175

mcollective has a default password set at install

mcollective mcollective mcollective mcollective Debian Ubuntu

Dec 13, 2019
Unscored —

CVE-2017-2292

Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential…

Puppet mcollective, Puppet, Puppet Enterprise mcollective mcollective Debian Ubuntu

Jun 30, 2017
Unscored —

CVE-2016-2788

MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary co…

mcollective Debian

Feb 13, 2017
Medium —

CVE-2014-3248

facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local us…

puppet puppet mcollective facter Debian Ubuntu RubyGems

Nov 16, 2014
Unscored —

CVE-2014-3251

The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not p…

mcollective Debian

Aug 12, 2014
Unscored —

CVE-2014-0164

openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions …

mcollective Debian

May 5, 2014