CVEvulnerability

CVE-2015-1426

2.1 LOW Published 2015-02-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-02-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.

Affected configurations

• puppet facter 1.6.0 • puppet facter 1.6.1 • puppet facter 1.6.2 • puppet facter 1.6.3 • puppet facter 1.6.4 • puppet facter 1.6.5 • puppet facter 1.6.6 • puppet facter 1.6.7 • puppet facter 1.6.8 • puppet facter 1.6.9 • puppet facter 1.6.10 • puppet facter 1.6.11 • puppet facter 1.6.12 • puppet facter 1.6.13 • puppet facter 1.6.14 • puppet facter 1.6.15 • puppet facter 1.6.16 • puppet facter 1.6.17 • puppet facter 1.6.18 • puppet facter 1.7.0 • puppet facter 1.7.1 • puppet facter 1.7.2 • puppet facter 1.7.3 • puppet facter 1.7.4 • puppet facter 1.7.5 • puppet facter 2.0.0 • puppet facter 2.0.1 • puppet facter 2.0.2 • puppet facter 2.1.0 • puppet facter 2.2.0 • puppet facter 2.3.0 • puppet facter 2.4.0 • puppetlabs facter 1.6.1 • puppetlabs facter 1.6.2 • puppetlabs facter 1.6.3 • puppetlabs facter 1.6.4 • puppetlabs facter 1.6.5 • puppetlabs facter 1.6.6 • puppetlabs facter 1.6.7 • puppetlabs facter 1.6.8 • puppetlabs facter 1.6.9 • puppetlabs facter 1.6.10 • puppetlabs facter 1.6.11 • puppetlabs facter 1.6.12 • puppetlabs facter 1.6.13 • puppetlabs facter 1.6.14 • puppetlabs facter 1.6.15 • puppetlabs facter 1.6.17 • puppetlabs facter 1.6.18 • puppetlabs facter 1.7.0 • puppetlabs facter 1.7.1 • puppetlabs facter 1.7.2 • puppetlabs facter 1.7.3 • puppetlabs facter 1.7.4 • puppetlabs facter 1.7.5 • puppetlabs facter 1.7.6 • puppetlabs facter 2.0.1

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References