CVE-2018-11746

In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discovery...

CVE-2018-11746

In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discovery...

CVE-2018-11746

CVE-2018-11746 affects Puppet Discovery prior to 1.2.0. When running against Windows, WinRM connections can fall back to basic auth over insecure channels if a HTTPS server is unavailable, exposing login credentials used by Puppet Discovery. The issue is specific to that context; upgrading to ver...

CVE-2018-11746 Puppet Discovery can leak authentication information

In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discovery...

CVE-2018-11746: Insufficiently Protected Credentials

In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discovery...

PT-2018-10801

Name of the Vulnerable Software and Affected Versions Puppet Discovery versions prior to 1.2.0 Description The issue allows WinRM connections to fall back to using basic auth over insecure channels if a HTTPS server is not available, potentially exposing login credentials used by Puppet Discovery...

PE client tools for Windows code execution vulnerability

Puppet is a set of configuration management tools based on the client/server C/S architecture of Puppet Labs, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version.PE client tools for Windows is one of the...

CVE-2018-6516

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

Privilege escalation

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

CVE-2018-6516

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

CVE-2018-6516

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

CVE-2018-6516

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

CVE-2018-6516

CVE-2018-6516 affects Puppet Enterprise client tools on Windows. A specially crafted configuration file could cause the PE client tools (pe-client-tools) 16.4.x before 16.4.6, 17.3.x before 17.3.6, and 18.1.x before 18.1.2 to load arbitrary code with privilege escalation. Connected sources confir...

CVE-2018-6516

Removed by vendor...

PT-2018-17605

Name of the Vulnerable Software and Affected Versions Puppet PE client tools versions 16.4.x through 16.4.5 Puppet PE client tools versions 17.3.x through 17.3.5 Puppet PE client tools versions 18.1.x through 18.1.1 Description The issue allows an attacker to load arbitrary code with privilege...

CVE-2018-6516: Undefined Security Weakness

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

Puppet Enterprise, razor-server and pe-razor-server pre-installation vulnerabilities

Puppet Enterprise, razor-server, and pe-razor-server are products of Puppet Labs, Inc. Puppet Enterprise is a set of configuration management tools based on a client/server C/S architecture. razor-server and pe-razor-server are advanced configuration applications for deploying bare metal and...

Puppet Enterprise and Puppet Agent Elevation of Privilege Vulnerability

Puppet Enterprise and Puppet Agent are both products of the U.S. Puppet is a set of configuration management tools based on the client/server C/S architecture, Puppet Enterprise is an enterprise version; Puppet Agent is a set of client-side tools. A security vulnerability exists in Puppet...

Remote Code Execution (RCE)

puppet is vulnerable to remote code execution RCE attacks. The library does not validate the paths when loading shared libraries, allowing a malicious user to create a custom fact that can escalate privileges during the next puppet run and execute arbitrary code...

Privilege Escalation Through DLL Preloading Attack

puppet gem is vulnerable to privilege escalation. It does not prevent the loading of DLL modules from the directories created by any authenticated users on Windows, thereby allowing the user to load attacker-controlled DLL modules...