Approved changes feed: RSS · Atom

cpe:2.3:a:hashicorp:packer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3)
ProductPacker (bf72fe0e-2ac8-50a2-ac8b-71e5c0dcc5ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/packer purl2cpe 2026-06-01 10:14:57.544389
pkg:deb/ubuntu/packer purl2cpe 2026-06-01 10:14:57.544391
pkg:github/hashicorp/packer purl2cpe 2026-06-01 10:14:57.544393
pkg:sourceforge/packer.mirror purl2cpe 2026-06-01 10:14:57.544394

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-15869 vulnerable 2026-06-03 14:38:19.536923 Details available
An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.
Published: 2018-08-25T00:00:00.000Z
Updated: 2024-08-05T10:10:05.047Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.