Puppet

Products

Exploited and recent CVEs

• CVE-2024-9160 Medium 5.4 Security Misconfiguration in Forge module PEADM 0.2%
• CVE-2023-5309 Medium 6.8 Broken Session Management in Puppet Enterprise 0.5%
• CVE-2023-5214 Medium 6.5 CVE-2023-5214 - Privilege Escalation in Puppet Bolt 0.4%
• CVE-2023-5255 Medium 4.4 Denial of Service for Revocation of Auto Renewed Certificates 0.5%
• CVE-2023-2530 Unrated A privilege escalation allowing remote code execution was discovered in the orchestration service. 1.1%
• CVE-2023-1894 Medium 5.3 A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down 0.4%
• CVE-2023-1894 Medium 5.3 A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down 0.4%
• CVE-2022-3276 High 8.4 Puppetlabs-mysql Command Injection 1.7%
• CVE-2022-3275 High 8.4 Puppetlabs-apt Command Injection 2.4%
• CVE-2022-2394 Medium 4.1 Sensitive Parameter Exposure in Puppet Bolt prior to 3.24 0.5%
• CVE-2022-0675 Medium 5.6 Puppet Firewall Module May Leave Unmanaged Rules 0.9%
• CVE-2020-7942 Unrated Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrast 0.8%
• CVE-2020-7942 Unrated Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrast 0.8%