Design/Logic Flaw

Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol...

CVE-2015-7330

Puppet Enterprise 2015.3 before 2015.3.1 is affected by CVE-2015-7330: a remote attacker can bypass the host whitelist protection mechanism by leveraging the Puppet communications protocol. The issue concerns the host-whitelist protection and is exploitable remotely via the Puppet communications ...

CVE-2015-7330

Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol...

[SECURITY] Fedora 24 Update: pulp-puppet-2.8.2-1.fc24

Provides a collection of platform plugins, client extensions and agent handlers that provide Puppet support...

CVE-2015-7330: Undefined Security Weakness

Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol...

PT-2016-3747

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions 2015.3 through 2015.3.0 Description The issue allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol. Recommendations For Puppet Enterprise versions...

Puppet Ice Hockey: 2015 Czech - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Puppet Ice Hockey: 2015 Czech published at the 'play' market has multiple vulnerabilities...

Puppet Soccer Champions 2014 - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Puppet Soccer Champions 2014 published at the 'play' market has multiple vulnerabilities...

Puppet Soccer Champions 2015 - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Puppet Soccer Champions 2015 published at the 'play' market has multiple vulnerabilities...

Puppet Enterprise Puppet Server Information Disclosure Vulnerability

Puppet Server is a set of U.S. Puppet Labs based on the client / server C / S architecture of the configuration management tool . The tool can be used to manage configuration files , users, cron tasks, packages, system services and so on. A security vulnerability exists in Puppet Enterprise versi...

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

Design/Logic Flaw

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

CVE-2015-7328

CVE-2015-7328 affects Puppet Server in Puppet Enterprise before 3.8.3 and in Puppet Server 2015.2.x before 2015.2.3. The root cause is that during initial installation and configuration the CA certificate’s private key is created with world-readable permissions, enabling local users to read sensi...

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

CVE-2015-7328

Removed by vendor...

CVE-2015-7328: Exposure of Sensitive Information to an Unauthorized Actor

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

PT-2016-3746

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 3.8.3 Puppet Enterprise versions prior to 2015.2.3 Description The issue concerns the use of world-readable permissions for the private key of the Certification Authority CA certificate during the initial...

Puppet Enterprise Multiple OpenSSL Vulnerabilities (FREAK)

According to its self-reported version number, the Puppet Enterprise application installed on the remote host is version 2.x or 3.x prior to 3.8.0. It is, therefore, affected by the following vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPOR...