Skip to content
OpenAdvisories

Product · Puppet

Puppet Agent

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-7942

    Improper Certificate Validation in Puppet

    Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the `default` …

    Puppet Puppet Agent Puppet puppet Debian RubyGems
  • Medium 5.5
    CVE-2017-10689

    Tarball permission preservation in puppet

    In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.

    Puppet Puppet Enterprise Puppet Agent puppet Debian Ubuntu RubyGems