| Package | Affected versions | Patched versions |
|---|---|---|
| facter | ≥ 1.6.0, < 2.4.1 | 2.4.1 |
| facter | = 1.6.0= 1.6.1= 1.6.10= 1.6.11= 1.6.12= 1.6.13= 1.6.14= 1.6.15= 1.6.16= 1.6.17= 1.6.18= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8= 1.6.9= 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.7.4= 1.7.5= 2.0.0= 2.0.1= 2.0.2= 2.1.0= 2.2.0= 2.3.0= 2.4.0 | |
| facter | = 1.6.1= 1.6.10= 1.6.11= 1.6.12= 1.6.13= 1.6.14= 1.6.15= 1.6.17= 1.6.18= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8= 1.6.9= 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.7.4= 1.7.5= 1.7.6= 2.0.1 |
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free