CVE-2023-5214 CVE-2023-5214 - Privilege Escalation in Puppet Bolt

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

CVE-2023-5214

CVE-2023-5214 affects Puppet Bolt before version 3.27.4. The vulnerability is described as a path to escalate privileges. No exploit details are provided in the available documents. Remediation: upgrade Puppet Bolt to 3.27.4 or later (if indicated by sources).

CVE-2023-5214

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

CVE-2023-5214 CVE-2023-5214 - Privilege Escalation in Puppet Bolt

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

PT-2023-31931 · Puppet · Puppet Bolt

Name of the Vulnerable Software and Affected Versions: Puppet Bolt versions prior to 3.27.4 Description: A path to escalate privileges was identified in Puppet Bolt. Recommendations: For versions prior to 3.27.4, update to version 3.27.4 or later to resolve the issue...

Puppet Bolt privilege escalation vulnerability

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

Puppet Bolt Security Vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, and so on. A security vulnerability exists in Puppet Bolt versions prior ...

CVE-2023-5214: Improper Privilege Management

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

CVE-2023-5255

An improper resource release vulnerability was found in puppet. For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

CVE-2023-5255

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

CVE-2023-5255

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

CVE-2023-5255

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

Design/Logic Flaw

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

UBUNTU-CVE-2023-5255

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

CVE-2023-5255 Denial of Service for Revocation of Auto Renewed Certificates

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

CVE-2023-5255

CVE-2023-5255 describes a flaw in Puppet Server where certificates using the auto-renew feature cannot be revoked, per the NVD entry. The CVE notes an impact of high availability disruption (availability impact A:H) with no confidentiality or integrity impact, and no user interaction required. Th...

CVE-2023-5255

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

CVE-2023-5255: Improper Resource Shutdown or Release

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

Puppet Server Security Vulnerability

Puppet Server is a software from Puppet Labs in the United States that is used to push configurations from a master server to other servers. A security vulnerability exists in Puppet Server that stems from the presence of a denial of service DOS vulnerability...

Amazon Linux 2 : emr-puppet (ALASEMR-PUPPET-2023-001)

The version of emr-puppet installed on the remote host is prior to 6.17.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2EMR-PUPPET-2023-001 advisory. A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a...