2.1

CVE-2015-1426

Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.

Data is provided by the National Vulnerability Database (NVD)
Puppet ≫ Facter Version1.6.0
Puppet ≫ Facter Version1.6.1 Updaterc1
Puppet ≫ Facter Version1.6.1 Updaterc2
Puppet ≫ Facter Version1.6.1 Updaterc3
Puppet ≫ Facter Version1.6.1 Updaterc4
Puppet ≫ Facter Version1.6.2 Updaterc1
Puppet ≫ Facter Version1.6.3 Updaterc1
Puppet ≫ Facter Version1.6.4 Updaterc1
Puppet ≫ Facter Version1.6.5 Updaterc1
Puppet ≫ Facter Version1.6.6 Updaterc1
Puppet ≫ Facter Version1.6.6 Updaterc2
Puppet ≫ Facter Version1.6.7 Updaterc1
Puppet ≫ Facter Version1.6.8 Updaterc1
Puppet ≫ Facter Version1.6.9 Updaterc1
Puppet ≫ Facter Version1.6.10 Updaterc1
Puppet ≫ Facter Version1.6.11 Updaterc1
Puppet ≫ Facter Version1.6.12 Updaterc1
Puppet ≫ Facter Version1.6.12 Updaterc2
Puppet ≫ Facter Version1.6.13 Updaterc1
Puppet ≫ Facter Version1.6.14 Updaterc1
Puppet ≫ Facter Version1.6.15 Updaterc1
Puppet ≫ Facter Version1.6.16
Puppet ≫ Facter Version1.6.17 Updaterc1
Puppet ≫ Facter Version1.6.18 Updaterc1
Puppet ≫ Facter Version1.7.0 Updaterc1
Puppet ≫ Facter Version1.7.0 Updaterc2
Puppet ≫ Facter Version1.7.1 Updaterc1
Puppet ≫ Facter Version1.7.2 Updaterc1
Puppet ≫ Facter Version1.7.3 Updaterc1
Puppet ≫ Facter Version1.7.4 Updaterc1
Puppet ≫ Facter Version1.7.5 Updaterc1
Puppet ≫ Facter Version1.7.5 Updaterc2
Puppet ≫ Facter Version2.0.0 Updaterc1
Puppet ≫ Facter Version2.0.0 Updaterc2
Puppet ≫ Facter Version2.0.0 Updaterc3
Puppet ≫ Facter Version2.0.0 Updaterc4
Puppet ≫ Facter Version2.0.1 Updaterc1
Puppet ≫ Facter Version2.0.1 Updaterc2
Puppet ≫ Facter Version2.0.1 Updaterc3
Puppet ≫ Facter Version2.0.1 Updaterc4
Puppet ≫ Facter Version2.0.2
Puppet ≫ Facter Version2.1.0
Puppet ≫ Facter Version2.2.0
Puppet ≫ Facter Version2.3.0
Puppet ≫ Facter Version2.4.0
Puppetlabs ≫ Facter Version1.6.1
Puppetlabs ≫ Facter Version1.6.2
Puppetlabs ≫ Facter Version1.6.3
Puppetlabs ≫ Facter Version1.6.4
Puppetlabs ≫ Facter Version1.6.5
Puppetlabs ≫ Facter Version1.6.6
Puppetlabs ≫ Facter Version1.6.7
Puppetlabs ≫ Facter Version1.6.8
Puppetlabs ≫ Facter Version1.6.9
Puppetlabs ≫ Facter Version1.6.10
Puppetlabs ≫ Facter Version1.6.11
Puppetlabs ≫ Facter Version1.6.12
Puppetlabs ≫ Facter Version1.6.13
Puppetlabs ≫ Facter Version1.6.14
Puppetlabs ≫ Facter Version1.6.15
Puppetlabs ≫ Facter Version1.6.17
Puppetlabs ≫ Facter Version1.6.18
Puppetlabs ≫ Facter Version1.7.0
Puppetlabs ≫ Facter Version1.7.1
Puppetlabs ≫ Facter Version1.7.2
Puppetlabs ≫ Facter Version1.7.3
Puppetlabs ≫ Facter Version1.7.4
Puppetlabs ≫ Facter Version1.7.5
Puppetlabs ≫ Facter Version1.7.6
Puppetlabs ≫ Facter Version2.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.153
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.