Lucene search
+L

2016 matches found

Fedora
Fedora
added 2016/04/11 9:17 a.m.30 views

[SECURITY] Fedora 24 Update: pulp-puppet-2.8.2-1.fc24

Provides a collection of platform plugins, client extensions and agent handlers that provide Puppet support...

5.5CVSS2.3AI score0.00303EPSS
SaveExploits1
hackapp
hackapp
added 2016/04/01 10:17 a.m.15 views

Puppet Ice Hockey: 2015 Czech - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Puppet Ice Hockey: 2015 Czech published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:17 a.m.6 views

Puppet Soccer Champions 2014 - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Puppet Soccer Champions 2014 published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:17 a.m.19 views

Puppet Soccer Champions 2015 - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Puppet Soccer Champions 2015 published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2016/01/12 12:0 a.m.9 views

Puppet Enterprise Puppet Server Information Disclosure Vulnerability

Puppet Server is a set of U.S. Puppet Labs based on the client / server C / S architecture of the configuration management tool . The tool can be used to manage configuration files , users, cron tasks, packages, system services and so on. A security vulnerability exists in Puppet Enterprise versi...

4.7CVSS6.4AI score0.00173EPSS
SaveExploits0References1
NVD
NVD
added 2016/01/08 7:59 p.m.20 views

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

4.7CVSS4.4AI score0.00173EPSS
SaveExploits0References1
Prion
Prion
added 2016/01/08 7:59 p.m.14 views

Design/Logic Flaw

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

1.9CVSS6.3AI score0.00173EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2016/01/08 7:59 p.m.24 views

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

4.7CVSS5.9AI score0.00173EPSS
SaveExploits0References2
CVE
CVE
added 2016/01/08 7:0 p.m.50 views

CVE-2015-7328

CVE-2015-7328 affects Puppet Server in Puppet Enterprise before 3.8.3 and in Puppet Server 2015.2.x before 2015.2.3. The root cause is that during initial installation and configuration the CA certificate’s private key is created with world-readable permissions, enabling local users to read sensi...

4.7CVSS4.3AI score0.00173EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2016/01/08 7:0 p.m.43 views

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

4.7CVSS4.7AI score0.00173EPSS
SaveExploits0
Cvelist
Cvelist
added 2016/01/08 7:0 p.m.33 views

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority CA certificate during the initial installation and configuration, which might allow local users to obtain sensitive...

4.4AI score0.00173EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/12/30 12:0 a.m.72 views

Puppet Enterprise Multiple OpenSSL Vulnerabilities (FREAK)

According to its self-reported version number, the Puppet Enterprise application installed on the remote host is version 2.x or 3.x prior to 3.8.0. It is, therefore, affected by the following vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPOR...

7.5CVSS7.9AI score0.98685EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
added 2015/12/17 12:0 a.m.23 views

Puppet Enterprise Installation Process Local CA Key Disclosure

According to its self-reported version number, the Puppet Enterprise application installed on the remote host is version 3.8.x prior to 3.8.3 or 4.2.x prior to 4.2.3. It is, therefore, affected by an information disclosure vulnerability due to the generated CA key being left in a world-readable...

4.7CVSS5.2AI score0.00173EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2015/10/30 9:30 a.m.15 views

CVE-2011-0528

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

5.5CVSS6.5AI score0.01652EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/10/13 12:0 a.m.23 views

SUSE: Security Advisory for puppet (SUSE-SU-2014:0155-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.4AI score0.01643EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/10/13 12:0 a.m.27 views

SUSE: Security Advisory for puppet (SUSE-SU-2014:0510-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.4AI score0.01643EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/09/29 12:0 a.m.32 views

Gentoo Security Advisory GLSA 201308-04

Gentoo Linux Local Security Checks GLSA 201308-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

9CVSS6.6AI score0.05375EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.33 views

Amazon Linux: Security Advisory (ALAS-2012-75)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.4AI score0.0147EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.31 views

Amazon Linux: Security Advisory (ALAS-2014-288)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.5AI score0.00428EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.25 views

Amazon Linux: Security Advisory (ALAS-2012-53)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.4AI score0.00384EPSS
SaveExploits0References2
Rows per page
Query Builder