Puppet Puppet Agent vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20184
3. 20201

Newest CVEs

• CVE-2020-7942

  Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate…

  Puppet · Puppet

  Medium6.5
• CVE-2018-6515

  Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted…

  Puppet · Puppet Agent

  High7.8
• CVE-2018-6514

  In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL…

  Puppet · Puppet Agent

  High7.8
• CVE-2017-10690

  In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was…

  Puppet · Puppet Enterprise

  Medium6.5
• CVE-2017-10689

  In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this…

  Puppet · Puppet Enterprise

  Medium5.5
• CVE-2016-5713

  Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet…

  Puppet · Puppet Agent

  Critical9.8