Puppet 2.6.5
Approved changes feed: RSS · Atom
cpe:2.3:a:puppet:puppet:2.6.5:*:*:*:*:*:*:*
part: a version: 2.6.5 update: *
| Vendor | Puppet (056a1ba3-12b3-5ecf-a97f-ab3b403c7816) |
|---|---|
| Product | Puppet (7d8fb82a-9b62-59b4-94cc-efb68e8fe2b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/puppet |
purl2cpe | 2026-06-01 10:14:37.053684 |
pkg:deb/ubuntu/puppet |
purl2cpe | 2026-06-01 10:14:37.053686 |
pkg:github/puppetlabs/puppet |
purl2cpe | 2026-06-01 10:14:37.053687 |
pkg:puppet/open-source-puppet |
purl2cpe | 2026-06-01 10:14:37.053689 |
pkg:rpm/fedora/puppet |
purl2cpe | 2026-06-01 10:14:37.053690 |
pkg:rpm/opensuse/puppet |
purl2cpe | 2026-06-01 10:14:37.053692 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-2275 |
vulnerable | 2026-06-08 05:04:24.292793 |
Details available
The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors.
Published: 2013-03-20T16:00:00.000Z
Updated: 2024-08-06T15:27:41.177Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2274 |
vulnerable | 2026-06-08 05:04:24.284950 |
Details available
Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.
Published: 2013-03-20T16:00:00.000Z
Updated: 2024-08-06T15:27:41.143Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3867 |
vulnerable | 2026-06-08 05:02:14.069143 |
Details available
lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences.
Published: 2012-08-06T16:00:00.000Z
Updated: 2024-08-06T20:21:04.014Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3865 |
vulnerable | 2026-06-08 05:02:14.067542 |
Details available
Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. (dot dot) in a node name.
Published: 2012-08-06T16:00:00.000Z
Updated: 2024-08-06T20:21:04.052Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3864 |
vulnerable | 2026-06-08 05:02:14.050434 |
Details available
Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request.
Published: 2012-08-06T16:00:00.000Z
Updated: 2024-08-06T20:21:04.064Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1987 |
vulnerable | 2026-06-08 05:00:52.182886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1986 |
vulnerable | 2026-06-08 05:00:52.181651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1906 |
vulnerable | 2026-06-08 05:00:51.313902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1054 |
vulnerable | 2026-06-08 05:00:47.267070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1053 |
vulnerable | 2026-06-08 05:00:47.249917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3872 |
vulnerable | 2026-06-08 04:59:28.219547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3871 |
vulnerable | 2026-06-08 04:59:28.218517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3870 |
vulnerable | 2026-06-08 04:59:28.217643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3869 |
vulnerable | 2026-06-08 04:59:28.208994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3848 |
vulnerable | 2026-06-08 04:59:27.971028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.