CVE-2016-5714

Description

References

• bugs.gentoo.org/597684 · Issue Tracking
• puppet.com/security/cve/cve-2016-5714 · Vendor Advisory
• puppet.com/security/cve/pxp-agent-oct-2016 · Issue Tracking
• security.gentoo.org/glsa/201710-12 · Third Party Advisory

Más vulnerabilidades de puppet agent

• CVE-2021-27025MEDIO 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27023CRÍTICO 9.8A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a dif…
• CVE-2020-7942MEDIO 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…
• CVE-2015-1855MEDIO 5.9verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does no…
• CVE-2016-5713CRÍTICO 9.8Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables th…