puppet-module-puppetlabs-mysql

3 results · Feed

• High 8.4
  CVE-2022-3276

  Puppetlabs-mysql Command Injection

  Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppe…

  Puppet puppetlabs-mysql puppet-module-puppetlabs-mysql puppet-module-puppetlabs-mysql Debian Ubuntu
  Oct 7, 2022
• Unscored —
  CVE-2018-6508

  Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string w…

  Puppet Puppet Enterprise puppetlabs-apt puppetlabs-apache Debian Ubuntu
  Feb 9, 2018
• Unscored —
  CVE-2015-7224

  puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a databa…

  puppet-module-puppetlabs-mysql Debian
  Dec 21, 2017