Vulnerabilities > Puppet > Puppet Enterprise > 2016.4.15

DATE CVE VULNERABILITY TITLE RISK
2018-02-09 CVE-2017-10690 Improper Privilege Management vulnerability in multiple products
In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from.
network
low complexity
puppet redhat CWE-269
4.0