184 matches found
CVE-2021-27025
CVE-2021-27025 affects Puppet Agent, where the agent may silently ignore Augeas settings or be vulnerable to a Denial of Service condition prior to the first pluginsync. The connected materials tie this issue to Puppet Agent across multiple contexts (including Puppet Enterprise and various Linux ...
CVE-2021-27025
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'...
CVE-2021-27025
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'...
PT-2021-8199 · Puppet +2 · Puppet Agent +2
Name of the Vulnerable Software and Affected Versions: Puppet Agent affected versions not specified Description: A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'. The iss...
PT-2021-8198 · Puppet +3 · Puppet Agent +4
Name of the Vulnerable Software and Affected Versions: Puppet Agent and Puppet Server affected versions not specified Description: A flaw in Puppet Agent and Puppet Server may result in a leak of HTTP credentials when following HTTP redirects to a different host. This issue is related to the...
CVE-2021-27025
A configuration flaw was found in Puppet Agent where the agent silently ignores Augeas settings. This flaw allows a network attacker to cause a denial of service before the first pluginsync. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availabilit...
Puppet 安全漏洞
Puppet is a set of configuration management tools based on the client/server C/S architecture from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Agent is a Puppet agent end-program. A security...
Puppet Server 安全漏洞
Puppet Server is a software from Puppet Labs in the U.S. for pushing configurations from the primary server to other servers. an information disclosure vulnerability exists in Puppet Agent and Puppet Server, which stems from a lack of restrictions and protections in the HTTP transport process,...
Puppet Agent 7.x < 7.4.0 Deserialization
The version of Puppet Agent installed on the remote Windows host is 7.x prior to 7.4.0. It is, therefore, affected by an deserialization vulnerability. An authenticated, remote attacker can exploit this to execute arbitrary code on the target host. Note that Nessus has not tested for this issue b...
Puppet Agent Installed
Binary data puppetagentinstalled.nbin...
CVE-2021-27017
A flaw was found in puppet-agent. Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Man-in-the-Middle (MitM)
puppet-agent is vulnerable to man-in-the-middle attack. The Puppet Agent does not properly verify the SSL connection when downloading a CRL...
puppet-agent: Puppet Agent does not properly verify SSL connection when downloading a CRL
A flaw was found in Puppet, where the Puppet Agent did not verify the peer in the SSL connection before downloading to the Certificate Revocation List CRL. The primary risk is the availability of communications to computing systems and not Puppet itself. This flaw allows an attacker to submit a...
The vulnerability of the Puppet infrastructure automation tool and its startup application, Puppet Agent, relates to errors in the certificate validation process. This vulnerability allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Puppet infrastructure automation tool and its startup application, Puppet Agent, is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informati...
CVE-2020-7942
Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a...
Puppet Agent Trust Management Issue Vulnerability
Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Agent is a Puppet agent end program. A security vulnerability exists in...
CVE-2018-11751
Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0...
CVE-2018-11751
Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0...
