2.1

CVE-2015-1426

Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Puppet ≫ Facter Version 1.6.0
Puppet ≫ Facter Version 1.6.1 Update rc1
Puppet ≫ Facter Version 1.6.1 Update rc2
Puppet ≫ Facter Version 1.6.1 Update rc3
Puppet ≫ Facter Version 1.6.1 Update rc4
Puppet ≫ Facter Version 1.6.2 Update rc1
Puppet ≫ Facter Version 1.6.3 Update rc1
Puppet ≫ Facter Version 1.6.4 Update rc1
Puppet ≫ Facter Version 1.6.5 Update rc1
Puppet ≫ Facter Version 1.6.6 Update rc1
Puppet ≫ Facter Version 1.6.6 Update rc2
Puppet ≫ Facter Version 1.6.7 Update rc1
Puppet ≫ Facter Version 1.6.8 Update rc1
Puppet ≫ Facter Version 1.6.9 Update rc1
Puppet ≫ Facter Version 1.6.10 Update rc1
Puppet ≫ Facter Version 1.6.11 Update rc1
Puppet ≫ Facter Version 1.6.12 Update rc1
Puppet ≫ Facter Version 1.6.12 Update rc2
Puppet ≫ Facter Version 1.6.13 Update rc1
Puppet ≫ Facter Version 1.6.14 Update rc1
Puppet ≫ Facter Version 1.6.15 Update rc1
Puppet ≫ Facter Version 1.6.16
Puppet ≫ Facter Version 1.6.17 Update rc1
Puppet ≫ Facter Version 1.6.18 Update rc1
Puppet ≫ Facter Version 1.7.0 Update rc1
Puppet ≫ Facter Version 1.7.0 Update rc2
Puppet ≫ Facter Version 1.7.1 Update rc1
Puppet ≫ Facter Version 1.7.2 Update rc1
Puppet ≫ Facter Version 1.7.3 Update rc1
Puppet ≫ Facter Version 1.7.4 Update rc1
Puppet ≫ Facter Version 1.7.5 Update rc1
Puppet ≫ Facter Version 1.7.5 Update rc2
Puppet ≫ Facter Version 2.0.0 Update rc1
Puppet ≫ Facter Version 2.0.0 Update rc2
Puppet ≫ Facter Version 2.0.0 Update rc3
Puppet ≫ Facter Version 2.0.0 Update rc4
Puppet ≫ Facter Version 2.0.1 Update rc1
Puppet ≫ Facter Version 2.0.1 Update rc2
Puppet ≫ Facter Version 2.0.1 Update rc3
Puppet ≫ Facter Version 2.0.1 Update rc4
Puppet ≫ Facter Version 2.0.2
Puppet ≫ Facter Version 2.1.0
Puppet ≫ Facter Version 2.2.0
Puppet ≫ Facter Version 2.3.0
Puppet ≫ Facter Version 2.4.0
Puppetlabs ≫ Facter Version 1.6.1
Puppetlabs ≫ Facter Version 1.6.2
Puppetlabs ≫ Facter Version 1.6.3
Puppetlabs ≫ Facter Version 1.6.4
Puppetlabs ≫ Facter Version 1.6.5
Puppetlabs ≫ Facter Version 1.6.6
Puppetlabs ≫ Facter Version 1.6.7
Puppetlabs ≫ Facter Version 1.6.8
Puppetlabs ≫ Facter Version 1.6.9
Puppetlabs ≫ Facter Version 1.6.10
Puppetlabs ≫ Facter Version 1.6.11
Puppetlabs ≫ Facter Version 1.6.12
Puppetlabs ≫ Facter Version 1.6.13
Puppetlabs ≫ Facter Version 1.6.14
Puppetlabs ≫ Facter Version 1.6.15
Puppetlabs ≫ Facter Version 1.6.17
Puppetlabs ≫ Facter Version 1.6.18
Puppetlabs ≫ Facter Version 1.7.0
Puppetlabs ≫ Facter Version 1.7.1
Puppetlabs ≫ Facter Version 1.7.2
Puppetlabs ≫ Facter Version 1.7.3
Puppetlabs ≫ Facter Version 1.7.4
Puppetlabs ≫ Facter Version 1.7.5
Puppetlabs ≫ Facter Version 1.7.6
Puppetlabs ≫ Facter Version 2.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.27
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://puppetlabs.com/security/cve/cve-2015-1426
Vendor Advisory