CVE-2016-5714

概要

参考情報

• bugs.gentoo.org/597684 · Issue Tracking
• puppet.com/security/cve/cve-2016-5714 · Vendor Advisory
• puppet.com/security/cve/pxp-agent-oct-2016 · Issue Tracking
• security.gentoo.org/glsa/201710-12 · Third Party Advisory

puppet agent のその他の脆弱性

• CVE-2021-27025中 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27023緊急 9.8A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a dif…
• CVE-2020-7942中 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…
• CVE-2015-1855中 5.9verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does no…
• CVE-2016-5713緊急 9.8Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables th…