EUVD-2016-10487

Malware in sbrugna...

EUVD-2016-3860

Malware in sbrugna...

CVE-2016-2787: Improper Access Control

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors...

Puppet Enterprise Denial of Service Vulnerability

Puppet is a set of configuration management tools based on a client/server architecture that can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise edition. A security vulnerability exists in the Puppet Communications...

CVE-2015-7330: Undefined Security Weakness

Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol...