Vendor/product archive

puppet / facter CVEs

Beta · best-effort

2 CVEs tagged to puppet / facter — 0 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to puppet vendor archive

CVE-2015-1426

Published Feb 23, 2015

Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.

CVSS 2.1 · Low

Vendor/product tagsBeta · best-effort

CVE-2014-3248

Published Nov 16, 2014

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mc…

CVSS 6.2 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1