EUVD-2016-6654

Malware in sbrugna...

Puppet Enterprise 2015.x / 2016.x < 2016.4.0 Multiple Vulnerabilities

According to its self-reported version number, the Puppet Enterprise application running on the remote host is version 2015.x or 2016.x prior to 2016.4.0. It is, therefore, affected by the following vulnerabilities : - A cross-site redirection vulnerability exists within the /auth/login script du...

CVE-2015-6501

Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter...

CVE-2015-6501

Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter...

CVE-2015-6501

Open redirect vulnerability (CVE-2015-6501) in Puppet Enterprise Console prior to 2015.2.1 allows remote attackers to redirect users to arbitrary sites via the string parameter, enabling phishing attempts. The issue is documented as an open redirect in Puppet Enterprise 2015.x/2016.x and is noted...