13 matches found
EUVD-2018-3769
Malware in sbrugna...
EUVD-2018-3771
Malware in sbrugna...
CVE-2018-11752
Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...
CVE-2018-11752
Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...
Code injection
Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...
Default credentials
Previous releases of the Puppet ciscoios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of ciscoios, host key checking is enabled by default...
CVE-2018-11750
Previous releases of the Puppet ciscoios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of ciscoios, host key checking is enabled by default...
CVE-2018-11750
The CVE concerns the Puppet cisco_ios module: earlier releases did not validate the host’s identity before initiating an SSH connection. This absence of host verification could enable an attacker to perform a man‑in‑the‑middle attack by impersonating the target host. The vulnerability is mitigate...
CVE-2018-11752
The vulnerability CVE-2018-11752 affects the Puppet cisco_ios module, where older releases would write SSH session debug information, including login credentials, to a world-readable file on every run. The issue is resolved in the 0.4.0 release. Affected component: Puppet cisco_ios module (no ven...
CVE-2018-11752
Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...
CVE-2018-11750
Previous releases of the Puppet ciscoios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of ciscoios, host key checking is enabled by default...
CVE-2018-11750: Improper Input Validation
Previous releases of the Puppet ciscoios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of ciscoios, host key checking is enabled by default...
CVE-2018-11752: Insufficiently Protected Credentials
Previous releases of the Puppet ciscoios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release...