Puppetlabs Vulnérabilités

Chronologie

Taper

Produit

Puppetlabs Puppet39
Puppetlabs Puppet Enterprise Users8
Puppetlabs Puppet Server4
Puppetlabs Puppet Bolt1
Puppetlabs Puppet Agent1

Contre-mesures

Official Fix50
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

Exploitabilité

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined57

Vecteur d'accès

Not Defined0
Physical0
Local16
Adjacent3
Network38

Authentification

Not Defined0
High1
Low17
None39

Interaction de l'utilisateur

Not Defined0
Required10
None47

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤49
≤511
≤618
≤77
≤86
≤93
≤102

CVSSv3 Temp

≤10
≤20
≤32
≤48
≤514
≤619
≤75
≤85
≤92
≤102

VulDB

≤10
≤20
≤32
≤410
≤510
≤618
≤76
≤86
≤93
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤71
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k7
<2k19
<5k31
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k57
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (10): Facter (1), Puppet (39), Puppet Agent (1), Puppet Bolt (1), Puppet Dashboard (1), Puppet Enterprise Users (8), Puppet Server (4), puppet (1), rabbitmq (1), stdlib (1)

Link to Vendor Website: https://puppet.com/

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
07/10/20237.06.9Puppetlabs Puppet Bolt elévation de privilègesService Management SoftwareNot DefinedOfficial Fix0.000910.02CVE-2023-5214
04/10/20234.74.7Puppetlabs Puppet Server Certificate dénie de serviceService Management SoftwareNot DefinedNot Defined0.000460.00CVE-2023-5255
04/05/20234.44.3Puppetlabs Puppet Server Certificate Name dénie de serviceService Management SoftwareNot DefinedOfficial Fix0.000490.00CVE-2023-1894
18/11/20212.62.6Puppetlabs Puppet Agent/Puppet Server HTTP Redirect divulgation de l'informationService Management SoftwareNot DefinedNot Defined0.002210.02CVE-2021-27023
23/02/20154.04.0Puppetlabs Facter Read divulgation de l'informationService Management SoftwareNot DefinedNot Defined0.000420.00CVE-2015-1426
03/02/20154.04.0puppetlabs rabbitmq divulgation de l'informationService Management SoftwareNot DefinedNot Defined0.000420.00CVE-2014-9568
16/01/20156.36.3puppetlabs stdlib Privileges elévation de privilègesService Management SoftwareNot DefinedNot Defined0.001760.00CVE-2015-1029
19/12/20144.34.1Puppetlabs Puppet Licensing divulgation de l'informationService Management SoftwareNot DefinedOfficial Fix0.001190.00CVE-2014-9355
17/12/20144.04.0Puppetlabs Puppet Server Installation race conditionService Management SoftwareNot DefinedNot Defined0.000420.00CVE-2014-7170
16/11/20147.47.1Puppetlabs Puppet Privileges Local Privilege EscalationService Management SoftwareNot DefinedOfficial Fix0.000420.00CVE-2014-3248

47 plus d'entrées ne sont pas affichées

Do you need the next level of professionalism?

Upgrade your account now!