15 known security vulnerabilities

  • moderateGHSA-6xxq-j39w-g3f6(CVE-2012-1988)

    Puppet Arbitrary Command Execution

Show 14 more vulnerabilities
11 moderate3 low
  • moderateGHSA-77hg-g8cc-5r37(CVE-2012-1053)

    Puppet Privilege Escallation

  • moderateGHSA-8c56-v25w-f89c(CVE-2011-3869)

    Puppet arbitrary file overwrite

  • moderateGHSA-92v7-pq4h-58j5(CVE-2014-3248)

    facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability

  • moderateGHSA-93j5-g845-9wqp(CVE-2021-27023)

    Unsafe HTTP Redirect in Puppet Agent and Puppet Server

  • moderateGHSA-c4mc-49hq-q275(CVE-2012-1906)

    Puppet uses predictable filenames, allowing arbitrary file overwrite

  • moderateGHSA-gqvf-892r-vjm5(CVE-2020-7942)

    Improper Certificate Validation in Puppet

  • moderateGHSA-mpmx-gm5v-q789(CVE-2011-3871)

    Puppet uses predictable filenames, allowing arbitrary file overwrite

  • moderateGHSA-q44r-f2hm-v76v(CVE-2012-3867)

    Pupper does not properly restrict characters in Common Name field of Certificate Signing Request

  • moderateGHSA-q4g7-jrxv-67r9(CVE-2021-27025)

    Silent Configuration Failure in Puppet Agent

  • moderateGHSA-qh3g-27jf-3j54(CVE-2011-3870)

    Puppet allows local users to modify the permissions of arbitrary files

  • moderateGHSA-vw22-465p-8j5w(CVE-2017-10689)

    Tarball permission preservation in puppet

  • lowGHSA-g89m-3wjw-h857(CVE-2012-3865)

    Puppet vulnerable to Path Traversal

  • lowGHSA-v58w-6xc2-w799(CVE-2012-1987)

    Puppet Denial of Service and Arbitrary File Write

  • lowGHSA-vxf6-w9mp-95hm(CVE-2012-3408)

    Puppet supports use of IP addresses in certnames without warning of potential risks

Puppet, an automated configuration management tool

Required Ruby Version

None

Authors

Puppet Labs

Versions

  1. 8.10.0

    1. source

      1. 8.10.0 source October 22, 2024 (1.46 MB)

    2. universal-darwin

      1. 8.10.0 multi-abi October 22, 2024 (1.46 MB)

    3. x64-mingw32

      1. 8.10.0 multi-abi October 22, 2024 (1.46 MB)

    4. x86-mingw32

      1. 8.10.0 multi-abi October 22, 2024 (1.46 MB)
  2. 8.9.0

    1. source

      1. 8.9.0 source September 10, 2024 (1.46 MB)

    2. universal-darwin

      1. 8.9.0 multi-abi September 10, 2024 (1.46 MB)

    3. x64-mingw32

      1. 8.9.0 multi-abi September 10, 2024 (1.46 MB)

    4. x86-mingw32

      1. 8.9.0 multi-abi September 10, 2024 (1.46 MB)
  3. 8.8.1

    1. source

      1. 8.8.1 source July 25, 2024 (1.46 MB)

    2. universal-darwin

      1. 8.8.1 multi-abi July 25, 2024 (1.46 MB)

    3. x64-mingw32

      1. 8.8.1 multi-abi July 25, 2024 (1.46 MB)

    4. x86-mingw32

      1. 8.8.1 multi-abi July 25, 2024 (1.46 MB)
  4. 8.7.0

    1. source

      1. 8.7.0 source June 11, 2024 (1.46 MB)

    2. universal-darwin

      1. 8.7.0 multi-abi June 11, 2024 (1.46 MB)

    3. x64-mingw32

      1. 8.7.0 multi-abi June 11, 2024 (1.46 MB)

    4. x86-mingw32

      1. 8.7.0 multi-abi June 11, 2024 (1.46 MB)
  5. 8.6.0

    1. source

      1. 8.6.0 source April 11, 2024 (1.47 MB)

    2. universal-darwin

      1. 8.6.0 multi-abi April 11, 2024 (1.47 MB)

    3. x64-mingw32

      1. 8.6.0 multi-abi April 11, 2024 (1.47 MB)

    4. x86-mingw32

      1. 8.6.0 multi-abi April 11, 2024 (1.47 MB)
  6. 2.6.8

    1. source

      1. 2.6.8 source April 27, 2011 (1.48 MB)
Show all versions (855 total)

SHA 256 checksum

← Previous version Next version →