Skip to content
OpenAdvisories

Package · Debian

puppet-agent

1 known vulnerabilities.

1 result · Feed

  • Critical 9.4

    Report Deserialization Code Execution

    Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by sub…