Lucene search

K
nvd[email protected]NVD:CVE-2015-1029
HistoryJan 16, 2015 - 4:59 p.m.

CVE-2015-1029

2015-01-1616:59:22
CWE-264
web.nvd.nist.gov

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.9%

The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or obtain sensitive information by prepopulating the fact cache.

Affected configurations

NVD
Node
puppetstdlibMatch2.1.0puppet
OR
puppetstdlibMatch2.1.1puppet
OR
puppetstdlibMatch2.1.2puppet
OR
puppetstdlibMatch2.1.3puppet
OR
puppetstdlibMatch2.2.0puppet
OR
puppetstdlibMatch2.2.1puppet
OR
puppetstdlibMatch2.3.0puppet
OR
puppetstdlibMatch2.3.1puppet
OR
puppetstdlibMatch2.3.2puppet
OR
puppetstdlibMatch2.3.3puppet
OR
puppetstdlibMatch2.4.0puppet
OR
puppetstdlibMatch2.5.0puppet
OR
puppetstdlibMatch3.0.0puppet
OR
puppetstdlibMatch4.1.0puppet
OR
puppetstdlibMatch4.2.0puppet
OR
puppetstdlibMatch4.2.1puppet
OR
puppetstdlibMatch4.2.2puppet
OR
puppetstdlibMatch4.3.0puppet
OR
puppetstdlibMatch4.3.1puppet
OR
puppetstdlibMatch4.3.2puppet
OR
puppetstdlibMatch4.4.0puppet
OR
puppetstdlibMatch4.5.0puppet
AND
puppetpuppet_enterpriseRange2.8.8

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.9%