CVE-2011-3872

概要

参考情報

• groups.google.com/group/puppet-announce/browse_thread/thread/e7edc3a71348f3e1 · Patch
• puppetlabs.com/blog/important-security-announcement-altnames-vulnerability
• secunia.com/advisories/46550 · Vendor Advisory
• secunia.com/advisories/46578 · Vendor Advisory
• secunia.com/advisories/46934
• secunia.com/advisories/46964
• securityfocus.com/bid/50356
• ubuntu.com/usn/USN-1238-1
• ubuntu.com/usn/USN-1238-2
• exchange.xforce.ibmcloud.com/vulnerabilities/70970
• puppet.com/security/cve/cve-2011-3872

puppet のその他の脆弱性

• CVE-2021-27026中 4.4A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
• CVE-2021-27025中 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27022中 4.9A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logg…
• CVE-2021-27021高 8.8A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query…
• CVE-2020-7942中 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…