PT-2018-10806 · Puppet · Puppet Cisco Ios Module

Publicado 2018-10-02 · Atualizado 2020-05-01 · CVE-2018-11752

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Puppet cisco ios module versions prior to 0.4.0

Description The issue concerns the Puppet cisco ios module, which previously output SSH session debug information, including login credentials, to a world-readable file on every run.

Recommendations For versions prior to 0.4.0, update to version 0.4.0 to resolve the issue.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2018-11752

Produtos afetados

Puppet Cisco Ios Module

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-11752 · Nota de Segurança
• https://puppet.com/security/cve/CVE-2018-11752 · Nota
• https://osv.dev/vulnerability/CVE-2018-11752 · Aviso do Fabricante