262 matches found
Information disclosure
The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...
CVE-2021-36756
CVE-2021-36756 affects CFEngine Enterprise 3.15.0–3.15.4 with Missing SSL Certificate Validation, exposed over network (per CVSS) and impacting confidentiality/integrity. Connected advisories confirm a fix is available; update cfengine packages via vendor advisories (e.g., ROSA/Red Hat) to remedi...
CVE-2021-36756
CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation...
CVE-2021-38379
The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...
CVE-2021-38379
CVE-2021-38379 affects CFEngine Enterprise Hub: versions 3.6.7–3.18.0 have insecure permissions that permit local information disclosure. Root cause is insecure hub permissions. Affected product is CFEngine Enterprise; impact is partial confidentiality breach with local access. Public exploits ar...
PT-2021-21340
Name of the Vulnerable Software and Affected Versions CFEngine Enterprise versions 3.15.0 through 3.15.4 Description The issue concerns missing SSL certificate validation. Recommendations For versions 3.15.0 through 3.15.4, update to a version that includes the fix for the missing SSL certificate...
Northern.tech CfEngine 信息泄露漏洞
Northern.tech CfEngine is an open source configuration management solution from Northern.tech, Inc. It is used to securely manage It infrastructure. An information disclosure vulnerability exists in Northern.tech CFEngine Enterprise that stems from the Hub in CFEngine Enterprise 3.6.7 through...
CVE-2021-38379: Incorrect Default Permissions
The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...
PT-2021-22093
Name of the Vulnerable Software and Affected Versions CFEngine Enterprise versions 3.6.7 through 3.18.0 Description The issue concerns Insecure Permissions in The Hub component, which can lead to local Information Disclosure. Recommendations For versions 3.6.7 through 3.18.0, update to a version...
Northern.tech CFEngine 信任管理问题漏洞
Northern.tech CfEngine is an open source configuration management solution from Northern.tech, Inc. It is used to securely manage It infrastructure. A security vulnerability exists in Northern.tech CFEngine Enterprise versions 3.15.0 through 3.15.4 that stems from the program's lack of SSL...
CVE-2021-36756: Improper Certificate Validation
CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation...
CVE-2019-19394
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
CVE-2019-19394
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
Code injection
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
CVE-2019-19394
CVE-2019-19394 affects Northern.tech CFEngine Enterprise prior to version 3.10.7, and the 3.11.x and 3.12.x branches prior to 3.12.3, as well as 3.13.x and 3.14.x branches. The vulnerability is an XSS issue in the CFEngine Enterprise product. The applicable fixes are in CFEngine Enterprise releas...
CVE-2019-19394
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
CVE-2019-19394: Improper Neutralization of Input During Web Page Generation
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
PT-2020-10155
Name of the Vulnerable Software and Affected Versions CFEngine Enterprise versions prior to 3.10.7 CFEngine Enterprise versions 3.11.x CFEngine Enterprise versions 3.12.x prior to 3.12.3 CFEngine Enterprise versions 3.13.x CFEngine Enterprise versions 3.14.x Description The issue allows for...
