CVE-2013-4971

Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-4966: Improper Authentication

The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console...

CVE-2013-4971: Undefined Security Weakness

Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2014-2883

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 3.2.0 Description The issue allows remote attackers to obtain sensitive information due to improper access restrictions to node endpoints in the console. Recommendations For versions prior to 3.2.0, update t...

PT-2014-2881

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 3.2.0 Description The issue concerns the master external node classification script, which fails to verify the identity of consoles. This allows remote attackers to create arbitrary classifications on the...

Important: Red Hat Security Advisory: openstack-packstack security and bug fix update

Updated openstack-packstack packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base...

Updated puppet & puppet3 packages fix CVE-2013-4969 and a regression

Updated puppet and puppet3 packages fix security vulnerability: An unsafe use of temporary files was discovered in Puppet, a tool for centralized configuration management. An attacker can exploit this vulnerability and overwrite an arbitrary file in the system CVE-2013-4969. This update also...

MGASA-2014-0084 Updated puppet & puppet3 packages fix CVE-2013-4969 and a regression

Updated puppet and puppet3 packages fix security vulnerability: An unsafe use of temporary files was discovered in Puppet, a tool for centralized configuration management. An attacker can exploit this vulnerability and overwrite an arbitrary file in the system CVE-2013-4969. This update also...

Mandriva Linux Security Advisory : puppet (MDVSA-2014:040)

A vulnerability has been discovered and corrected in puppet : Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise PE before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files CVE-2013-4969. The updated packages have been...

DEBIAN-CVE-2011-0528

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

CVE-2011-0528

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

CVE-2011-0528

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

Code injection

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

CVE-2011-0528

PVE: CVE-2011-0528 affects Puppet 2.6.0–2.6.3, which does not properly restrict access to node resources. The vulnerability lets remote authenticated Puppet nodes read or modify other nodes’ resources via unspecified vectors. The description confirms the issue but does not provide concrete exploi...

CVE-2011-0528

Removed by vendor...

CVE-2011-0528

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

CVE-2011-0528

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

CVE-2011-0528: Undefined Security Weakness

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

PT-2014-2106

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.0 through 2.6.3 Description The issue allows remote authenticated Puppet nodes to read or modify the resources of other nodes due to improper access restrictions to node resources. Recommendations For Puppet versions 2.6.0...

Amazon Linux AMI : puppet (ALAS-2014-288)

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise PE before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...