Puppetlabs Vulnerabilidad

Cronología

Escribe

Producto

Puppetlabs Puppet39
Puppetlabs Puppet Enterprise Users8
Puppetlabs Puppet Server4
Puppetlabs Puppet Bolt1
Puppetlabs Puppet Agent1

Contramedidas

Official Fix50
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined57

Vector de acceso

Not Defined0
Physical0
Local16
Adjacent3
Network38

Autenticación

Not Defined0
High1
Low17
None39

La interacción del usuario

Not Defined0
Required10
None47

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤49
≤511
≤618
≤77
≤86
≤93
≤102

CVSSv3 Temp

≤10
≤20
≤32
≤48
≤514
≤619
≤75
≤85
≤92
≤102

VulDB

≤10
≤20
≤32
≤410
≤510
≤618
≤76
≤86
≤93
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤71
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k7
<2k19
<5k31
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k57
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (10): Facter (1), Puppet (39), Puppet Agent (1), Puppet Bolt (1), Puppet Dashboard (1), Puppet Enterprise Users (8), Puppet Server (4), puppet (1), rabbitmq (1), stdlib (1)

Link to Vendor Website: https://puppet.com/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2023-10-077.06.9Puppetlabs Puppet Bolt escalada de privilegiosService Management SoftwareNot DefinedOfficial Fix0.000910.02CVE-2023-5214
2023-10-044.74.7Puppetlabs Puppet Server Certificate denegación de servicioService Management SoftwareNot DefinedNot Defined0.000460.00CVE-2023-5255
2023-05-044.44.3Puppetlabs Puppet Server Certificate Name denegación de servicioService Management SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-1894
2021-11-182.62.6Puppetlabs Puppet Agent/Puppet Server HTTP Redirect divulgación de informaciónService Management SoftwareNot DefinedNot Defined0.002210.02CVE-2021-27023
2015-02-234.04.0Puppetlabs Facter Read divulgación de informaciónService Management SoftwareNot DefinedNot Defined0.000420.00CVE-2015-1426
2015-02-034.04.0puppetlabs rabbitmq divulgación de informaciónService Management SoftwareNot DefinedNot Defined0.000420.03CVE-2014-9568
2015-01-166.36.3puppetlabs stdlib Privileges escalada de privilegiosService Management SoftwareNot DefinedNot Defined0.001760.00CVE-2015-1029
2014-12-194.34.1Puppetlabs Puppet Licensing divulgación de informaciónService Management SoftwareNot DefinedOfficial Fix0.001190.00CVE-2014-9355
2014-12-174.04.0Puppetlabs Puppet Server Installation condición de carreraService Management SoftwareNot DefinedNot Defined0.000420.00CVE-2014-7170
2014-11-167.47.1Puppetlabs Puppet Privileges Local Privilege EscalationService Management SoftwareNot DefinedOfficial Fix0.000420.00CVE-2014-3248

47 no se muestran más entradas

Might our Artificial Intelligence support you?

Check our Alexa App!