Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

puppetlabs puppet 2.7.20 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2013-1655
Puppet 2.7.x prior to 2.7.21 and 3.1.x prior to 3.1.1, when running Ruby 1.9.3 or later, allows remote malicious users to execute arbitrary code via vectors related to "serialized attributes."
Puppetlabs Puppet 2.7.20Puppetlabs Puppet 2.7.1Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.16Puppet Puppet 2.7.3Puppet Puppet 2.7.11Puppet Puppet 2.7.2Puppet Puppet 2.7.13Puppet Puppet 2.7.8Puppet Puppet 2.7.10Puppet Puppet Enterprise 3.1.0Puppet Puppet 2.7.18Puppet Puppet 2.7.17Puppet Puppet 2.7.9Puppet Puppet 2.7.4Puppetlabs Puppet 2.7.19Puppet Puppet 2.7.6Puppet Puppet 2.7.7Puppet Puppet 2.7.5Puppet Puppet 2.7.14Puppet Puppet 2.7.12
7.1
CVSSv2
CVE-2013-1653
Puppet prior to 2.6.18, 2.7.x prior to 2.7.21, and 3.1.x prior to 3.1.1, and Puppet Enterprise prior to 1.2.7 and 2.7.x prior to 2.7.2, when listening for incoming connections is enabled and allowing access to the "run" REST endpoint is allowed, allows remote authentica...
Puppet PuppetPuppet Puppet 2.7.11Puppet Puppet 2.7.12Puppet Puppet 2.7.13Puppet Puppet 2.7.14Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.7Puppet Puppet 2.7.9Puppet Puppet 2.7.17Puppetlabs Puppet 2.7.19Puppetlabs Puppet 2.7.1Puppet Puppet 2.7.6Puppet Puppet 2.7.8Puppet Puppet 2.7.10Puppet Puppet 2.7.16Puppet Puppet 2.7.18Puppet Puppet 2.7.2Puppet Puppet 2.7.3Puppet Puppet 2.7.4Puppet Puppet 2.7.5Puppetlabs Puppet 2.7.20Puppet Puppet Enterprise 3.1.0
7.5
CVSSv2
CVE-2013-3567
Puppet 2.7.x prior to 2.7.22 and 3.2.x prior to 3.2.2, and Puppet Enterprise prior to 2.8.2, deserializes untrusted YAML, which allows remote malicious users to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.
Puppetlabs Puppet 2.7.1Puppet Puppet 2.7.10Puppet Puppet 2.7.18Puppetlabs Puppet 2.7.19Puppetlabs Puppet 3.2.0Puppet Puppet 2.7.13Puppet Puppet 2.7.14Puppetlabs Puppet 2.7.20Puppet Puppet 2.7.21Puppet Puppet 2.7.11Puppet Puppet 2.7.12Puppet Puppet 2.7.2Puppet Puppet 3.2.1Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.16Puppet Puppet 2.7.17Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 13.04Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Desktop 11.0Novell Suse Linux Enterprise Desktop 11
4.9
CVSSv2
CVE-2013-1652
Puppet prior to 2.6.18, 2.7.x prior to 2.7.21, and 3.1.x prior to 3.1.1, and Puppet Enterprise prior to 1.2.7 and 2.7.x prior to 2.7.2 allows remote authenticated users with a valid certificate and private key to read arbitrary catalogs or poison the master's cache via unspe...
Puppetlabs PuppetPuppet Puppet 2.7.11Puppet Puppet 2.7.18Puppet Puppet 2.7.17Puppet Puppet 2.7.13Puppetlabs Puppet 2.7.19Puppetlabs Puppet 2.7.20Puppet Puppet 2.7.14Puppetlabs Puppet 2.7.1Puppet Puppet 2.7.9Puppet Puppet 2.7.3Puppet Puppet 2.7.10Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.7Puppet Puppet 2.7.5Puppet Puppet 2.7.8Puppet Puppet 2.7.6Puppet Puppet 2.7.16Puppet Puppet 2.7.2Puppet Puppet 2.7.4Puppet Puppet 2.7.12Puppet Puppet Enterprise 3.1.0
5
CVSSv2
CVE-2013-1654
Puppet 2.7.x prior to 2.7.21 and 3.1.x prior to 3.1.1, and Puppet Enterprise 2.7.x prior to 2.7.2, does not properly negotiate the SSL protocol between client and master, which allows remote malicious users to conduct SSLv2 downgrade attacks against SSLv3 sessions via unspecified...
Puppetlabs Puppet 2.7.19Puppetlabs Puppet 2.7.20Puppet Puppet 2.7.16Puppet Puppet 2.7.14Puppet Puppet 2.7.4Puppet Puppet 2.7.3Puppet Puppet 2.7.17Puppet Puppet 2.7.13Puppet Puppet 2.7.8Puppet Puppet 2.7.9Puppet Puppet 2.7.11Puppet Puppet 2.7.18Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.7Puppet Puppet 2.7.5Puppet Puppet 2.7.6Puppet Puppet 2.7.2Puppetlabs Puppet 2.7.1Puppet Puppet 2.7.12Puppet Puppet 2.7.10Puppet Puppet Enterprise 3.1.0Canonical Ubuntu Linux 11.10
4
CVSSv2
CVE-2013-2275
The default configuration for puppet masters 0.25.0 and later in Puppet prior to 2.6.18, 2.7.x prior to 2.7.21, and 3.1.x prior to 3.1.1, and Puppet Enterprise prior to 1.2.7 and 2.7.x prior to 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspeci...
Puppet Puppet 2.6.0Puppet Puppet 2.6.15Puppet Puppet 2.6.16Puppet Puppet 2.6.14Puppet Puppet 2.6.4Puppet Puppet 2.6.3Puppet Puppet 2.6.2Puppet Puppet 2.6.1Puppetlabs PuppetPuppet Puppet 2.6.12Puppet Puppet 2.6.9Puppet Puppet 2.6.10Puppet Puppet 2.6.8Puppet Puppet 2.6.6Puppet Puppet 2.6.13Puppet Puppet 2.6.11Puppet Puppet 2.6.7Puppet Puppet 2.6.5Puppetlabs Puppet 2.7.19Puppetlabs Puppet 2.7.20Puppet Puppet 2.7.9Puppet Puppet 2.7.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook