CVE-2015-1855

概要

参考情報

• debian.org/security/2015/dsa-3245 · Third Party Advisory
• debian.org/security/2015/dsa-3246 · Third Party Advisory
• debian.org/security/2015/dsa-3247 · Third Party Advisory
• bugs.ruby-lang.org/issues/9644 · Third Party Advisory
• puppetlabs.com/security/cve/cve-2015-1855 · Third Party Advisory
• ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability · Vendor Advisory

puppet agent のその他の脆弱性

• CVE-2021-27025中 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27023緊急 9.8A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a dif…
• CVE-2020-7942中 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…
• CVE-2016-5713緊急 9.8Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables th…
• CVE-2016-5714高 7.2Puppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow remote attackers to bypass a host whitelis…