Vulnerabilities > Puppet > Mcollective Sshkey Security > 0.5.0

DATE CVE VULNERABILITY TITLE RISK
2017-06-30 CVE-2017-2298 Improper Input Validation vulnerability in Puppet Mcollective-Sshkey-Security 0.5.0
The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written.
network
puppet CWE-20
4.3