Vulnerabilities > Puppet > Puppet Enterprise
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2014-03-14 | CVE-2012-0891 | Cross-Site Scripting vulnerability in Puppet Dashboard and Puppet Enterprise Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields. | 4.3 |
| 2014-03-09 | CVE-2013-4971 | Permissions, Privileges, and Access Controls vulnerability in Puppet Enterprise Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors. | 5.0 |
| 2014-03-09 | CVE-2013-4966 | Improper Authentication vulnerability in Puppet Enterprise The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console. | 6.4 |
| 2014-01-07 | CVE-2013-4969 | Link Following vulnerability in multiple products Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files. | 2.1 |
| 2013-10-25 | CVE-2013-4965 | Improper Authentication vulnerability in Puppet Enterprise Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack. | 5.0 |
| 2013-10-25 | CVE-2013-4957 | Code Injection vulnerability in Puppet Enterprise The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type. | 6.8 |
| 2013-08-20 | CVE-2013-4967 | Credentials Management vulnerability in Puppet Enterprise Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes. | 5.0 |
| 2013-08-20 | CVE-2013-4964 | Permissions, Privileges, and Access Controls vulnerability in Puppet Enterprise Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. | 5.0 |
| 2013-08-20 | CVE-2013-4962 | Credentials Management vulnerability in Puppet Enterprise The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors. | 5.8 |
| 2013-08-20 | CVE-2013-4961 | Information Exposure vulnerability in Puppet Enterprise Puppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger products in its HTTP response headers, which allows remote attackers to obtain sensitive information. | 5.0 |