Vendor/product archive

puppet / marionette_collective CVEs

Beta · best-effort

3 CVEs tagged to puppet / marionette_collective — 2 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to puppet vendor archive

CVE-2014-0175

Published Dec 13, 2019

mcollective has a default password set at install

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2016-2788

Published Feb 13, 2017

MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2014-3248

Published Nov 16, 2014

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mc…

CVSS 6.2 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1