CVE-2016-5713

概要

参考情報

• puppet.com/security/cve/cve-2016-5713 · Vendor Advisory

puppet agent のその他の脆弱性

• CVE-2021-27025中 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27023緊急 9.8A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a dif…
• CVE-2020-7942中 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…
• CVE-2015-1855中 5.9verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does no…
• CVE-2016-5714高 7.2Puppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow remote attackers to bypass a host whitelis…