Puppet 漏洞

时间轴

类型

Service Management Software15
Firewall Software1

产品

Puppet Enterprise5
Puppet Master webutil3
Puppet cisco_ios2
Puppet Bolt1
Puppet Firewall Module1

修正

Official Fix7
Temporary Fix0
Workaround0
Unavailable0
Not Defined9

易受攻击性

High0
Functional0
Proof-of-Concept3
Unproven0
Not Defined13

访问向量

Not Defined0
Physical0
Local4
Adjacent2
Network10

身份验证

Not Defined0
High0
Low9
None7

用户交互

Not Defined0
Required1
None15

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤51
≤64
≤72
≤82
≤92
≤103

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤51
≤64
≤72
≤82
≤92
≤103

VulDB

≤10
≤20
≤30
≤43
≤52
≤64
≤72
≤81
≤91
≤103

NVD

≤10
≤20
≤30
≤41
≤51
≤60
≤71
≤83
≤91
≤103

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤71
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k6
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k15
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (9): Agent (1), Bolt (1), DB (1), Enterprise (5), Firewall Module (1), PE Client Tools (1), cisco_ios (2), device_manager (1), webutil (3)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2023-11-077.47.3Puppet Enterprise SAML 弱身份验证Service Management SoftwareNot DefinedOfficial Fix0.000910.00CVE-2023-5309
2023-06-088.07.9Puppet Enterprise Orchestration Service 权限升级Service Management SoftwareNot DefinedOfficial Fix0.002350.02CVE-2023-2530
2022-07-204.03.9Puppet Bolt 信息公开Service Management SoftwareNot DefinedOfficial Fix0.000540.00CVE-2022-2394
2022-03-035.65.6Puppet Firewall Module Rule 权限升级Firewall SoftwareNot DefinedNot Defined0.002010.00CVE-2022-0675
2021-08-315.55.5Puppet Enterprise CSV Export Privilege EscalationService Management SoftwareNot DefinedNot Defined0.002010.00CVE-2021-27020
2021-07-214.64.6Puppet DB SQL Query 权限升级Service Management SoftwareNot DefinedNot Defined0.001040.07CVE-2021-27021
2018-10-025.55.5Puppet cisco_ios SSH Session Credentials 权限升级Service Management SoftwareNot DefinedNot Defined0.000440.00CVE-2018-11752
2018-10-026.46.2Puppet cisco_ios SSH Connection 权限升级Service Management SoftwareNot DefinedOfficial Fix0.000600.00CVE-2018-11750
2018-10-025.55.5Puppet device_manager Configuration File Credentials 权限升级Service Management SoftwareNot DefinedNot Defined0.000440.03CVE-2018-11748
2018-06-146.56.3Puppet PE Client Tools Configuration File 权限升级Service Management SoftwareNot DefinedOfficial Fix0.000630.03CVE-2018-6516

6 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 6 results.

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!