Default credentials

mcollective has a default password set at install...

UBUNTU-CVE-2014-0175

mcollective has a default password set at install...

CVE-2014-0175

mcollective has a default password set at install...

CVE-2014-0175

mcollective has a default password set at install...

CVE-2014-0175

CVE-2014-0175 relates to mcollective with a default password set at installation. Connected sources corroborate an unpatched/default-credential condition affecting mcollective; CVSS metrics indicate high risk (Network, low attack complexity, no authentication required, partial confidentiality/int...

PT-2019-7040 · Puppet +1 · Mcollective +1

Name of the Vulnerable Software and Affected Versions: mcollective affected versions not specified Description: The issue is related to a default password being set during installation. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Puppet Enterprise < 2016.2.1 Multiple Vulnerabilities

According to its self-reported version number, the Puppet Enterprise application running on the remote host is version prior to 2016.2.1. It is, therefore, affected by the following vulnerabilities : - A remote code execution vulnerability exists in the mcollective puppet-agent plugin due to an...

Insecure Defaults

mcollective is vulnerable to insecure defaults. The vulnerability exists through a default password set at install...

World-readable Permissions

The openshift-origin-broker-util package has world-readable permission vulnerability. It happens because the package sets the permissions for mcollective client.cfg configuration as world-readable by default, leakaging sensitive information regarding the mcollective installation, including...

RHEL 6 : openshift-origin-broker-util (RHSA-2014:0460)

An updated openshift-origin-broker-util package that fixes one security issue is now available for Red Hat OpenShift Enterprise 2.0.5. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 6 : openshift-origin-broker-util (RHSA-2014:0461)

An updated openshift-origin-broker-util package that fixes one security issue is now available for Red Hat OpenShift Enterprise 1.2.7. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0764)

An updated rubygem-openshift-origin-node package that fixes one security issue and several bugs is now available for Red Hat OpenShift Enterprise 2.1.1. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base...

Remote Code Execution (RCE)

mcollective-client is vulnerable to remote code execution. This is due to the use of eval to evaluate comparison expressions in discovery filters, which allows an attacker to execute arbitrary code via the mco ping command...

Puppet Enterprise MCollective Server Installs Arbitrary Package Vulnerability

Puppet is a set of configuration management tools based on a client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, etc.Puppet Enterprise is an enterprise version.MCollective Server is one of the...

Puppet Enterprise < 2016.4.4 / 2017 < 2017.2.1 Multiple Vulnerabilities

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 are prone to multiple vulnerabilities. This VT has duplicated the existing VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2017-2293

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this...

Default configuration

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this...

CVE-2017-2293

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this...

CVE-2017-2293

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this...

CVE-2017-2293

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this...