CVEvulnerability
CVE-2015-1029
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-01-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or obtain sensitive information by prepopulating the fact cache.
Affected configurations
• puppet stdlib 2.1.0
• puppet stdlib 2.1.1
• puppet stdlib 2.1.2
• puppet stdlib 2.1.3
• puppet stdlib 2.2.0
• puppet stdlib 2.2.1
• puppet stdlib 2.3.0
• puppet stdlib 2.3.1
• puppet stdlib 2.3.2
• puppet stdlib 2.3.3
• puppet stdlib 2.4.0
• puppet stdlib 2.5.0
• puppet stdlib 3.0.0
• puppet stdlib 4.1.0
• puppet stdlib 4.2.0
• puppet stdlib 4.2.1
• puppet stdlib 4.2.2
• puppet stdlib 4.3.0
• puppet stdlib 4.3.1
• puppet stdlib 4.3.2
• puppet stdlib 4.4.0
• puppet stdlib 4.5.0
Related
Weakness · not in database (1)
References
- http://puppetlabs.com/security/cve/cve-2015-1029 Vendor Advisory
- http://secunia.com/advisories/62328 secunia.com
- http://puppetlabs.com/security/cve/cve-2015-1029 Vendor Advisory
- http://secunia.com/advisories/62328 secunia.com