Puppet Vulnerabilidad

Cronología

El año pasado

Versión

2.5.120
2.7.018
2.7.217
2.7.116
3.0.015

Contramedidas

Official Fix93
Temporary Fix0
Workaround0
Unavailable0
Not Defined14

Explotabilidad

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined106

Vector de acceso

Not Defined0
Physical0
Local24
Adjacent8
Network75

Autenticación

Not Defined0
High4
Low38
None65

La interacción del usuario

Not Defined0
Required19
None88

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤31
≤410
≤515
≤636
≤719
≤814
≤98
≤104

CVSSv3 Temp

≤10
≤20
≤32
≤49
≤521
≤637
≤718
≤89
≤97
≤104

VulDB

≤10
≤20
≤32
≤416
≤523
≤633
≤711
≤815
≤93
≤104

NVD

≤10
≤20
≤30
≤40
≤51
≤68
≤714
≤811
≤94
≤109

CNA

≤10
≤20
≤30
≤40
≤51
≤62
≤72
≤83
≤91
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k17
<2k50
<5k40
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k107
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (158): 0.2, 0.24.3, 0.24.4, 0.24.5, 0.24.6, 0.24.7, 0.24.8, 0.25, 0.25.1, 0.25.2, 0.25.3, 0.25.4, 0.25.5, 0.25.6, 1, 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.3, 1.3.1, 1.3.3, 1.4, 1.5, 1.6, 1.6.18, 1.7, 1.8, 1.9, 1.10, 1.10.9, 1.11, 1.12, 2, 2.0.1, 2.0.2, 2.0.3, 2.5, 2.5.1, 2.5.2, 2.6, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.7, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.7.8, 2.7.9, 2.7.11, 2.7.12, 2.7.13, 2.7.14, 2.7.16, 2.7.17, 2.7.18, 2.7.19, 2.7.21, 2.7.22, 2.7.26, 2.8, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 3, 3.0, 3.0.1, 3.1, 3.1.1, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.6, 3.6.1, 3.7, 3.8, 3.27, 3.27.1, 3.27.2, 3.27.3, 4.0, 4.0.1, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 5.0, 5.1, 5.2, 5.3, 5.3.3, 5.3.4, 5.4, 6.0, 6.1, 6.2, 6.3, 6.4, 6.13, 8.0, 8.1, 8.2, 9.4, 9.4.1, 9.4.2, 9.4.3, 215.2, 2015, 2015.3, 2015.3.1, 2015.3.2, 2015.3.3, 2016.0, 2016.1, 2016.2, 2016.3, 2016.4.14, 2017.0, 2017.1, 2017.2, 2017.2.1, 2017.3, 2017.3.9, 2018.1.3

Tipo de software: Service Management Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2024-03-016.36.2danielparks puppet-golang dp-golang escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-27294
2023-10-077.06.9Puppetlabs Puppet Bolt escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-5214
2023-10-044.74.7Puppetlabs Puppet Server Certificate denegación de servicio$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-5255
2023-05-044.44.3Puppetlabs Puppet Server Certificate Name denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-1894
2023-01-277.07.0puppet-facter getFact escalada de privilegios$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-25350
2021-11-193.53.5Puppet Enterprise Plan Parameter divulgación de información$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2021-27026
2021-11-183.53.5Puppet Agent Augeas Setting denegación de servicio$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2021-27025
2021-11-185.55.3Continuous Delivery for Puppet Enterprise API Token escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-27024
2021-11-182.62.6Puppetlabs Puppet Agent/Puppet Server HTTP Redirect divulgación de información$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2021-27023
2021-09-083.53.5Puppet Inventory Service Node divulgación de información$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2021-27022
2021-08-317.37.0Puppet autenticación débil$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-27018
2020-09-184.44.4Puppet Enterprise CD4PE Deployment Definition Credentials divulgación de información$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-7945
2020-03-266.36.2Puppet Enterprise Impact Analysis Report divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.09CVE-2020-7944
2020-03-115.95.6Puppet Enterprise/Puppet Server/PuppetDB API Endpoint escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-7943
2020-02-195.15.1Puppet Enterprise puppet.conf autenticación débil$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-7942
2019-12-165.55.4Puppet Agent SSL Certificate Valu autenticación débil$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2018-11751
2019-12-125.45.3Puppet Enterprise root_configuration Password divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2019-10695
2019-12-128.58.4Puppet Enterprise Express Install autenticación débil$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2019-10694
2019-12-115.25.1Puppet Enterprise cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2013-4968
2019-10-168.68.6Puppet Enterprise Pipeline Custom Script Security Whitelist escalada de privilegios$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-10458
2019-03-217.77.4Puppet Discovery Nginx Container autenticación débil$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-11747
2018-08-247.77.4Puppet Enterprise RBAC LDAP divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2018-11749
2018-07-038.68.5Puppet Discovery WinRM Fallback escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-11746
2018-06-116.56.3Puppet Agent Configuration File escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-6515
2018-06-116.56.3Puppet Agent escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-6514

82 no se muestran más entradas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!