Puppet

Marionette Collective

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.6%
  • Published 13.12.2019 13:15:10
  • Last modified 21.11.2024 02:01:33

mcollective has a default password set at install

  • EPSS 2.09%
  • Published 13.02.2017 18:59:00
  • Last modified 20.04.2025 01:37:25

MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.

Exploit
  • EPSS 0.16%
  • Published 16.11.2014 17:59:03
  • Last modified 12.04.2025 10:46:40

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows...