Puppet Agent 1.0.0

CPE Details

Puppet Agent 1.0.0
puppet
puppet_agent
1.0.0
2020-09-30
10h26 +00:00
2020-09-30
10h26 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:puppet:puppet_agent:1.0.0:*:*:*:*:*:*:*

Informations

Vendor

puppet

Product

puppet_agent

Version

1.0.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-27023 2021-11-18 13h33 +00:00 A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007
9.8
Critique
CVE-2021-27025 2021-11-18 13h30 +00:00 A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.
6.5
Moyen
CVE-2015-1855 2019-11-29 19h46 +00:00 verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
5.9
Moyen