Approved changes feed: RSS · Atom

cpe:2.3:a:puppet:chloride:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPuppet (056a1ba3-12b3-5ecf-a97f-ab3b403c7816)
ProductChloride (78ed53fd-90c6-59fd-b3af-01e21427f586)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/puppetlabs-toy-chest/chloride purl2cpe 2026-06-01 10:14:37.418839

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6517 vulnerable 2026-06-03 14:39:00.446072 Details available
Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's known_hosts file without confirmation. In version 0.3.0 this is updated so that the user's known_hosts file is not updated by chloride.
Published: 2019-03-17T19:14:43.000Z
Updated: 2024-08-05T06:10:10.019Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.