EUVD-2018-3771

Malware in sbrugna...

EUVD-2018-3769

Malware in sbrugna...

CVE-2018-11752

Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...

CVE-2018-11752

Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...

Default credentials

Previous releases of the Puppet ciscoios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of ciscoios, host key checking is enabled by default...

CVE-2018-11750

Previous releases of the Puppet ciscoios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of ciscoios, host key checking is enabled by default...

Code injection

Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...

CVE-2018-11752

The vulnerability CVE-2018-11752 affects the Puppet cisco_ios module, where older releases would write SSH session debug information, including login credentials, to a world-readable file on every run. The issue is resolved in the 0.4.0 release. Affected component: Puppet cisco_ios module (no ven...

CVE-2018-11750

Previous releases of the Puppet ciscoios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of ciscoios, host key checking is enabled by default...

CVE-2018-11750

The CVE concerns the Puppet cisco_ios module: earlier releases did not validate the host’s identity before initiating an SSH connection. This absence of host verification could enable an attacker to perform a man‑in‑the‑middle attack by impersonating the target host. The vulnerability is mitigate...

CVE-2018-11752

Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...