CVE-2011-3848

Description

References

• lists.opensuse.org/opensuse-updates/2011-10/msg00033.html
• secunia.com/advisories/46628 · Vendor Advisory
• debian.org/security/2011/dsa-2314
• ubuntu.com/usn/USN-1217-1
• groups.google.com/group/puppet-announce/browse_thread/thread/e57ce2740feb9406 · Patch
• puppet.com/security/cve/cve-2011-3848

More vulnerabilities in puppet

• CVE-2021-27026MEDIUM 4.4A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
• CVE-2021-27025MEDIUM 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27022MEDIUM 4.9A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logg…
• CVE-2021-27021HIGH 8.8A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query…
• CVE-2020-7942MEDIUM 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…