Vulnerabilities > Puppetlabs > Facter > 1.7.3

DATE CVE VULNERABILITY TITLE RISK
2015-02-23 CVE-2015-1426 Information Exposure vulnerability in multiple products
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
local
low complexity
puppet puppetlabs CWE-200
2.1