2017.2.5

DATE	CVE	VULNERABILITY TITLE	RISK
2018-02-09	CVE-2017-10690	Improper Privilege Management vulnerability in multiple products In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. network low complexity puppet redhat CWE-269	6.5
2018-02-09	CVE-2017-10689	Improper Privilege Management vulnerability in multiple products In previous versions of Puppet Agent it was possible to install a module with world writable permissions. local low complexity puppet canonical redhat CWE-269	5.5