2012-05-28

2012-05-29

2012-05-30

All (3) Critical (2) High (1) Medium (4) Low (3)

CVE-2012-1987 May 29, 20:55 LOW PATCH Monitor

Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Puppet Enterprise Puppet

NVD

CVSS 2.0

3.5

EPSS

2.6%

CVE-2012-1906 May 29, 20:55 LOW PATCH Monitor

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from. Rated low severity (CVSS 3.3).

Privilege Escalation Puppet Enterprise Puppet Puppet Enterprise Users Puppetlabs

NVD

CVSS 2.0

3.3

EPSS

0.1%

CVE-2012-1986 May 29, 20:55 LOW Monitor

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Puppet Enterprise Puppet Puppet Enterprise Users Puppetlabs

NVD

CVSS 2.0

2.1

EPSS

0.4%