CVE-2017-10690

Description

References

• access.redhat.com/errata/RHSA-2018:2927 · Third Party Advisory
• puppet.com/security/cve/CVE-2017-10690 · Vendor Advisory

puppet 的其他漏洞

• CVE-2021-27026中危 4.4A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
• CVE-2021-27025中危 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27022中危 4.9A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logg…
• CVE-2021-27021高危 8.8A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query…
• CVE-2020-7942中危 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…