PT-2016-3747 · Puppet · Puppet Enterprise

Publicado 2016-04-11 · Atualizado 2022-01-24 · CVE-2015-7330

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions 2015.3 through 2015.3.0

Description The issue allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol.

Recommendations For Puppet Enterprise versions 2015.3 through 2015.3.0, update to version 2015.3.1 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2015-7330

Produtos afetados

Puppet Enterprise

Referências · 4

• http://securitytracker.com/id/1034550 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7330 · Nota de Segurança
• https://t.me/cvenotify/25771 · Publicação no Telegram
• https://puppetlabs.com/security/cve/cve-2015-7330 · Aviso do Fabricante