Puppetlabs الثغرات

التسلسل الزمني

النوع

Service Management Software57

منتج

Puppetlabs Puppet39
Puppetlabs Puppet Enterprise Users8
Puppetlabs Puppet Server4
Puppetlabs Puppet Bolt1
Puppetlabs Puppet Agent1

معالجة

Official Fix50
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

قابلية الاستغلال

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined57

متجه الوصول

Not Defined0
Physical0
Local16
Adjacent3
Network38

توثيق

Not Defined0
High1
Low17
None39

تفاعل المستخدم

Not Defined0
Required10
None47

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤49
≤511
≤618
≤77
≤86
≤93
≤102

CVSSv3 Temp

≤10
≤20
≤32
≤48
≤514
≤619
≤75
≤85
≤92
≤102

VulDB

≤10
≤20
≤32
≤410
≤510
≤618
≤76
≤86
≤93
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤71
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k7
<2k19
<5k31
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k57
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (10): Facter (1), Puppet (39), Puppet Agent (1), Puppet Bolt (1), Puppet Dashboard (1), Puppet Enterprise Users (8), Puppet Server (4), puppet (1), rabbitmq (1), stdlib (1)

Link to Vendor Website: https://puppet.com/

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
07/10/20237.06.9Puppetlabs Puppet Bolt تجاوز الصلاحياتService Management SoftwareNot DefinedOfficial Fix0.000910.02CVE-2023-5214
04/10/20234.74.7Puppetlabs Puppet Server Certificate الحرمان من الخدمةService Management SoftwareNot DefinedNot Defined0.000460.00CVE-2023-5255
04/05/20234.44.3Puppetlabs Puppet Server Certificate Name الحرمان من الخدمةService Management SoftwareNot DefinedOfficial Fix0.000490.00CVE-2023-1894
18/11/20212.62.6Puppetlabs Puppet Agent/Puppet Server HTTP Redirect الكشف عن المعلوماتService Management SoftwareNot DefinedNot Defined0.002210.02CVE-2021-27023
23/02/20154.04.0Puppetlabs Facter Read الكشف عن المعلوماتService Management SoftwareNot DefinedNot Defined0.000420.00CVE-2015-1426
03/02/20154.04.0puppetlabs rabbitmq الكشف عن المعلوماتService Management SoftwareNot DefinedNot Defined0.000420.00CVE-2014-9568
16/01/20156.36.3puppetlabs stdlib Privileges تجاوز الصلاحياتService Management SoftwareNot DefinedNot Defined0.001760.00CVE-2015-1029
19/12/20144.34.1Puppetlabs Puppet Licensing الكشف عن المعلوماتService Management SoftwareNot DefinedOfficial Fix0.001190.00CVE-2014-9355
17/12/20144.04.0Puppetlabs Puppet Server Installation حالة السباقService Management SoftwareNot DefinedNot Defined0.000420.00CVE-2014-7170
16/11/20147.47.1Puppetlabs Puppet Privileges Local Privilege EscalationService Management SoftwareNot DefinedOfficial Fix0.000420.00CVE-2014-3248

47 بعض الادخالات لم يتم عرضها

🔒 Login Required

You need to signup and login to see more of the remaining 47 results.

التالي ▸نظرة عامة◂ السابق

Do you know our Splunk app?

Download it now for free!