16 known security vulnerabilities

  • highGHSA-574q-fxfj-wv6h(CVE-2013-1655)

    Puppet Improper Input Validation vulnerability

Show 15 more vulnerabilities
1 high9 moderate5 low
  • highGHSA-f7p5-w2cr-7cp7(CVE-2013-3567)

    Puppet Improper Input Validation vulnerability

  • moderateGHSA-6xxq-j39w-g3f6(CVE-2012-1988)

    Puppet Arbitrary Command Execution

  • moderateGHSA-92v7-pq4h-58j5(CVE-2014-3248)

    facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability

  • moderateGHSA-93j5-g845-9wqp(CVE-2021-27023)

    Unsafe HTTP Redirect in Puppet Agent and Puppet Server

  • moderateGHSA-c4mc-49hq-q275(CVE-2012-1906)

    Puppet uses predictable filenames, allowing arbitrary file overwrite

  • moderateGHSA-cj43-9h3w-v976(CVE-2013-4761)

    Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service

  • moderateGHSA-gqvf-892r-vjm5(CVE-2020-7942)

    Improper Certificate Validation in Puppet

  • moderateGHSA-q44r-f2hm-v76v(CVE-2012-3867)

    Pupper does not properly restrict characters in Common Name field of Certificate Signing Request

  • moderateGHSA-q4g7-jrxv-67r9(CVE-2021-27025)

    Silent Configuration Failure in Puppet Agent

  • moderateGHSA-vw22-465p-8j5w(CVE-2017-10689)

    Tarball permission preservation in puppet

  • lowGHSA-8jxj-9r5f-w3m2(CVE-2012-3866)

    Puppet allows local users to obtain sensitive configuration information

  • lowGHSA-c5qq-g673-5p49(CVE-2012-1989)

    Puppet allows local users to overwrite arbitrary files via a symlink attack

  • lowGHSA-g89m-3wjw-h857(CVE-2012-3865)

    Puppet vulnerable to Path Traversal

  • lowGHSA-v58w-6xc2-w799(CVE-2012-1987)

    Puppet Denial of Service and Arbitrary File Write

  • lowGHSA-vxf6-w9mp-95hm(CVE-2012-3408)

    Puppet supports use of IP addresses in certnames without warning of potential risks

Puppet, an automated configuration management tool

Required Ruby Version

None

Authors

Puppet Labs

Versions

  1. 8.10.0

    1. source

      1. 8.10.0 source October 22, 2024 (1.46 MB)

    2. universal-darwin

      1. 8.10.0 multi-abi October 22, 2024 (1.46 MB)

    3. x64-mingw32

      1. 8.10.0 multi-abi October 22, 2024 (1.46 MB)

    4. x86-mingw32

      1. 8.10.0 multi-abi October 22, 2024 (1.46 MB)
  2. 8.9.0

    1. source

      1. 8.9.0 source September 10, 2024 (1.46 MB)

    2. universal-darwin

      1. 8.9.0 multi-abi September 10, 2024 (1.46 MB)

    3. x64-mingw32

      1. 8.9.0 multi-abi September 10, 2024 (1.46 MB)

    4. x86-mingw32

      1. 8.9.0 multi-abi September 10, 2024 (1.46 MB)
  3. 8.8.1

    1. source

      1. 8.8.1 source July 25, 2024 (1.46 MB)

    2. universal-darwin

      1. 8.8.1 multi-abi July 25, 2024 (1.46 MB)

    3. x64-mingw32

      1. 8.8.1 multi-abi July 25, 2024 (1.46 MB)

    4. x86-mingw32

      1. 8.8.1 multi-abi July 25, 2024 (1.46 MB)
  4. 8.7.0

    1. source

      1. 8.7.0 source June 11, 2024 (1.46 MB)

    2. universal-darwin

      1. 8.7.0 multi-abi June 11, 2024 (1.46 MB)

    3. x64-mingw32

      1. 8.7.0 multi-abi June 11, 2024 (1.46 MB)

    4. x86-mingw32

      1. 8.7.0 multi-abi June 11, 2024 (1.46 MB)
  5. 8.6.0

    1. source

      1. 8.6.0 source April 11, 2024 (1.47 MB)

    2. universal-darwin

      1. 8.6.0 multi-abi April 11, 2024 (1.47 MB)

    3. x64-mingw32

      1. 8.6.0 multi-abi April 11, 2024 (1.47 MB)

    4. x86-mingw32

      1. 8.6.0 multi-abi April 11, 2024 (1.47 MB)
  6. 2.7.12

    1. source

      1. 2.7.12 source March 12, 2012 (1.79 MB)
Show all versions (855 total)

SHA 256 checksum

← Previous version Next version →