Known vulnerabilities in Puppet Agent - page 2

Software: Puppet Agent
Software CPE: cpe:2.3:a:puppet_labs:puppet:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Puppet Agent Puppet Agent is affected by 35 known vulnerabilities: 5 high, 15 medium, 15 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU37571 - Improper input validation
CVE-2017-2293
CWE-20 Medium
No
No
- 01.02.2018 SB2017070515
#VU37572 - Improper input validation
CVE-2017-2296
CWE-20 Medium
No
No
- 01.02.2018 SB2018020133
#VU37573 - Improper Authentication
CVE-2017-2297
CWE-287 Medium
No
No
- 01.02.2018 SB2017070515
#VU37740 - Improper Certificate Validation
CVE-2015-4100
CWE-295 Medium
No
No
- 21.12.2017 SB2017122109
#VU38793 - Exposure of sensitive information to an unauthorized actor
CVE-2017-2294
CWE-200 Medium
No
No
- 05.07.2017 SB2017070515
#VU6804 - Deserialization of Untrusted Data
CVE-2017-2295
CWE-502 High
No
No
- 30.05.2017 SB2017053003
SB2017051216
SB2017060612
and 6 more
#VU40398 - Security Features
CVE-2015-7330
CWE-254 High
No
No
- 12.04.2016 SB2016041225
#VU42027 - Permissions, Privileges, and Access Controls
CVE-2011-0528
CWE-264 Low
No
No
- 17.02.2014 SB2014021701
SB2012021408
#VU31880 - Improper Link Resolution Before File Access ('Link Following')
CVE-2013-4969
CWE-59 Low
No
No
3.4.1 07.01.2014 SB2014010702
SB2014020305
SB2013122702
and 1 more
#VU42980 - Improper input validation
CVE-2013-1640
CWE-20 Medium
No
No
2.7.21 20.03.2013 SB2013032003
SB2013041109
#VU43767 - Exposure of sensitive information to an unauthorized actor
CVE-2012-3864
CWE-200 Low
No
No
- 06.08.2012 SB2012080603
#VU43768 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2012-3865
CWE-22 Low
No
No
2.6.17, 2.7.18 06.08.2012 SB2012080604
#VU43769 - Permissions, Privileges, and Access Controls
CVE-2012-3866
CWE-264 Low
No
No
2.7.18 06.08.2012 SB2012080604
#VU43770 - Improper Authentication
CVE-2012-3408
CWE-287 Low
No
No
2.5.2 06.08.2012 SB2012080601
#VU44555 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2011-3848
CWE-22 Medium
No
No
2.6.10, 2.7.4 27.10.2011 SB2011102702
SB2015092811


Showing elements 21 - 40 out of 35