CVE-2013-1652

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html · Mailing List
• lists.opensuse.org/opensuse-updates/2013-04/msg00056.html · Mailing List
• rhn.redhat.com/errata/RHSA-2013-0710.html · Third Party Advisory
• secunia.com/advisories/52596 · Third Party Advisory
• ubuntu.com/usn/usn-1759-1 · Third Party Advisory
• debian.org/security/2013/dsa-2643 · Third Party Advisory
• securityfocus.com/bid/58443 · Third Party Advisory
• puppetlabs.com/security/cve/cve-2013-1652 · Vendor Advisory

puppet のその他の脆弱性

• CVE-2021-27026中 4.4A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
• CVE-2021-27025中 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27022中 4.9A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logg…
• CVE-2021-27021高 8.8A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query…
• CVE-2020-7942中 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…