PT-2018-10805

Name of the Vulnerable Software and Affected Versions Puppet cisco ios module versions prior to 0.4.0 Description The issue concerns the lack of host identity validation before establishing a SSH connection. This has been addressed in the 0.4.0 release of the cisco ios module, where host key...

PT-2018-10806

Name of the Vulnerable Software and Affected Versions Puppet cisco ios module versions prior to 0.4.0 Description The issue concerns the Puppet cisco ios module, which previously output SSH session debug information, including login credentials, to a world-readable file on every run...