{"items":[{"id":"CVE-2024-9160","published":"2024-09-27T18:58:43.352Z","updated":"2024-09-27T19:25:45.709Z","title":"Security Misconfiguration in Forge module PEADM","severity":"MEDIUM","score":5.4,"vendor":"Puppet","product":"PEADM Forge Module","kev":false,"epss":0.00165,"kevAdded":null,"exploit":false},{"id":"CVE-2023-5309","published":"2023-11-07T19:01:05.041Z","updated":"2024-09-04T19:03:16.727Z","title":"Broken Session Management in Puppet Enterprise","severity":"MEDIUM","score":6.8,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00496,"kevAdded":null,"exploit":false},{"id":"CVE-2023-5214","published":"2023-10-06T17:22:49.431Z","updated":"2024-09-19T14:37:03.576Z","title":"CVE-2023-5214 - Privilege Escalation in Puppet Bolt","severity":"MEDIUM","score":6.5,"vendor":"Puppet","product":"Bolt","kev":false,"epss":0.00447,"kevAdded":null,"exploit":false},{"id":"CVE-2023-5255","published":"2023-10-03T17:54:55.177Z","updated":"2024-09-19T19:29:30.230Z","title":"Denial of Service for Revocation of Auto Renewed Certificates","severity":"MEDIUM","score":4.4,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00476,"kevAdded":null,"exploit":false},{"id":"CVE-2023-2530","published":"2023-06-07T00:00:00.000Z","updated":"2025-08-26T14:17:55.192Z","title":"A privilege escalation allowing remote code execution was discovered in the orchestration service.","severity":"CRITICAL","score":9.8,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.01107,"kevAdded":null,"exploit":false},{"id":"CVE-2023-1894","published":"2023-05-04T22:13:02.556Z","updated":"2025-01-29T17:55:40.169Z","title":"A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted…","severity":"MEDIUM","score":5.3,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00437,"kevAdded":null,"exploit":false},{"id":"CVE-2022-3276","published":"2022-10-07T00:00:00.000Z","updated":"2024-08-03T01:07:05.971Z","title":"Puppetlabs-mysql Command Injection","severity":"HIGH","score":8.4,"vendor":"Puppet","product":"puppetlabs-mysql","kev":false,"epss":0.01686,"kevAdded":null,"exploit":false},{"id":"CVE-2022-3275","published":"2022-10-07T00:00:00.000Z","updated":"2024-08-03T01:07:06.418Z","title":"Puppetlabs-apt Command Injection","severity":"HIGH","score":8.4,"vendor":"Puppet","product":"puppetlabs-apt","kev":false,"epss":0.02368,"kevAdded":null,"exploit":false},{"id":"CVE-2022-2394","published":"2022-07-19T17:46:48.011Z","updated":"2024-09-16T20:22:09.334Z","title":"Sensitive Parameter Exposure in Puppet Bolt prior to 3.24","severity":"MEDIUM","score":4.1,"vendor":"Puppet","product":"Bolt","kev":false,"epss":0.00537,"kevAdded":null,"exploit":false},{"id":"CVE-2022-0675","published":"2022-03-02T21:00:59.000Z","updated":"2024-08-02T23:40:03.173Z","title":"Puppet Firewall Module May Leave Unmanaged Rules","severity":"MEDIUM","score":5.6,"vendor":"Puppet","product":"Firewall Module","kev":false,"epss":0.00918,"kevAdded":null,"exploit":false},{"id":"CVE-2020-7942","published":"2020-02-19T20:52:03.000Z","updated":"2024-08-04T09:48:24.553Z","title":"Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate…","severity":"MEDIUM","score":6.5,"vendor":"Puppet","product":"Puppet","kev":false,"epss":0.00801,"kevAdded":null,"exploit":false},{"id":"CVE-2018-11747","published":"2019-03-17T19:16:13.000Z","updated":"2024-08-05T08:17:08.991Z","title":"Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be…","severity":"CRITICAL","score":9.8,"vendor":"Puppet","product":"Puppet Discovery","kev":false,"epss":0.00724,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6517","published":"2019-03-17T19:14:43.000Z","updated":"2024-08-05T06:10:10.019Z","title":"Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's known_hosts file…","severity":"HIGH","score":7.5,"vendor":"Puppet","product":"Chloride","kev":false,"epss":0.00893,"kevAdded":null,"exploit":false},{"id":"CVE-2018-11749","published":"2018-08-24T13:00:00.000Z","updated":"2024-09-16T22:44:55.842Z","title":"When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server. This affects Puppet…","severity":"CRITICAL","score":9.8,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00758,"kevAdded":null,"exploit":false},{"id":"CVE-2018-11746","published":"2018-07-03T13:00:00.000Z","updated":"2024-09-16T23:55:51.656Z","title":"Puppet Discovery can leak authentication information","severity":"HIGH","score":8.6,"vendor":"Puppet","product":"Puppet Discovery","kev":false,"epss":0.01381,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6516","published":"2018-06-14T21:00:00.000Z","updated":"2024-09-16T23:45:51.357Z","title":"On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6,…","severity":"HIGH","score":7.8,"vendor":"Puppet","product":"pe-client-tools","kev":false,"epss":0.00847,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6515","published":"2018-06-11T20:00:00.000Z","updated":"2024-09-16T23:10:26.852Z","title":"Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted…","severity":"HIGH","score":7.8,"vendor":"Puppet","product":"Puppet Agent","kev":false,"epss":0.00847,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6514","published":"2018-06-11T20:00:00.000Z","updated":"2024-09-16T17:49:24.249Z","title":"In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL…","severity":"HIGH","score":7.8,"vendor":"Puppet","product":"Puppet Agent","kev":false,"epss":0.00847,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6513","published":"2018-06-11T20:00:00.000Z","updated":"2024-09-17T01:46:25.460Z","title":"Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x…","severity":"HIGH","score":8.8,"vendor":"Puppet","product":"Puppet Enterprise and Puppet Agent","kev":false,"epss":0.01117,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6512","published":"2018-06-11T20:00:00.000Z","updated":"2024-09-16T20:17:47.278Z","title":"The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. Affected releases are Puppet…","severity":"CRITICAL","score":9.8,"vendor":"Puppet","product":"Puppet Enterprise 2018.1.x prior to 2018.1.1, razor-server and pe-razor-server prior to 1.9.0.0","kev":false,"epss":0.01942,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6511","published":"2018-05-08T18:00:00.000Z","updated":"2024-09-16T20:32:57.469Z","title":"XSS Vulnerability in Puppet Enterprise Console","severity":"MEDIUM","score":5.4,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00636,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6510","published":"2018-05-08T18:00:00.000Z","updated":"2024-09-16T17:37:42.972Z","title":"XSS Vulnerability in Puppet Enterprise Console","severity":"MEDIUM","score":5.4,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00508,"kevAdded":null,"exploit":false},{"id":"CVE-2018-6508","published":"2018-02-09T20:00:00.000Z","updated":"2024-09-17T01:55:41.774Z","title":"Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or…","severity":"HIGH","score":8,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.01871,"kevAdded":null,"exploit":false},{"id":"CVE-2017-10690","published":"2018-02-09T20:00:00.000Z","updated":"2024-09-16T17:49:12.591Z","title":"In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was…","severity":"MEDIUM","score":6.5,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.01,"kevAdded":null,"exploit":false},{"id":"CVE-2017-10689","published":"2018-02-09T20:00:00.000Z","updated":"2024-09-17T00:20:43.149Z","title":"In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this…","severity":"MEDIUM","score":5.5,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00356,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2297","published":"2018-02-01T22:00:00.000Z","updated":"2024-09-17T00:56:12.336Z","title":"Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been…","severity":"HIGH","score":7.5,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00635,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2296","published":"2018-02-01T22:00:00.000Z","updated":"2024-09-17T03:48:29.424Z","title":"In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role…","severity":"MEDIUM","score":6.5,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.0088,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2293","published":"2018-02-01T22:00:00.000Z","updated":"2024-09-16T17:33:31.679Z","title":"Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove…","severity":"MEDIUM","score":4.9,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.00688,"kevAdded":null,"exploit":false},{"id":"CVE-2016-5713","published":"2017-12-06T15:00:00.000Z","updated":"2024-09-17T00:06:12.325Z","title":"Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet…","severity":"CRITICAL","score":9.8,"vendor":"Puppet","product":"Puppet Agent","kev":false,"epss":0.02022,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2299","published":"2017-09-15T18:00:00.000Z","updated":"2024-09-16T18:59:14.375Z","title":"Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the `ssl_ca`…","severity":"HIGH","score":7.5,"vendor":"Puppet","product":"puppetlabs-apache","kev":false,"epss":0.00848,"kevAdded":null,"exploit":false},{"id":"CVE-2016-5716","published":"2017-08-09T14:00:00.000Z","updated":"2024-09-16T23:46:30.239Z","title":"The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code execution on the…","severity":"HIGH","score":8.8,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.01773,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2295","published":"2017-07-05T15:00:00.000Z","updated":"2024-09-16T20:43:40.186Z","title":"Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could…","severity":"HIGH","score":8.2,"vendor":"Puppet","product":"Puppet server","kev":false,"epss":0.02762,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2294","published":"2017-07-05T15:00:00.000Z","updated":"2024-09-17T02:20:34.679Z","title":"Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 failed to mark MCollective server private keys as sensitive (a feature added in Puppet 4.6), so key…","severity":"HIGH","score":7.5,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.01163,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2298","published":"2017-06-30T20:00:00.000Z","updated":"2024-09-16T18:08:33.665Z","title":"The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised…","severity":"MEDIUM","score":6.5,"vendor":"Puppet","product":"mcollective","kev":false,"epss":0.01494,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2292","published":"2017-06-30T20:00:00.000Z","updated":"2024-09-16T23:52:02.685Z","title":"Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential for arbitrary code execution on the…","severity":"CRITICAL","score":9,"vendor":"Puppet","product":"mcollective, Puppet, Puppet Enterprise","kev":false,"epss":0.0218,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2290","published":"2017-03-03T15:00:00.000Z","updated":"2024-08-05T13:48:05.267Z","title":"On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with…","severity":"HIGH","score":8.8,"vendor":"Puppet","product":"mcollective-puppet-agent plugin","kev":false,"epss":0.01226,"kevAdded":null,"exploit":false},{"id":"CVE-2016-9686","published":"2017-02-08T22:00:00.000Z","updated":"2024-08-06T02:59:03.352Z","title":"The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing…","severity":"MEDIUM","score":5.3,"vendor":"Puppet","product":"Puppet Enterprise","kev":false,"epss":0.01275,"kevAdded":null,"exploit":false}]}