Puppet Enterprise 2.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:puppet:puppet_enterprise:2.0.1:*:*:*:*:*:*:*
part: a version: 2.0.1 update: *
| Vendor | Puppet (056a1ba3-12b3-5ecf-a97f-ab3b403c7816) |
|---|---|
| Product | Puppet Enterprise (f0f1d1ad-3d9e-59c3-8dee-09d0423ff49c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/puppetlabs/puppet |
purl2cpe | 2026-06-01 10:14:37.329926 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4963 |
vulnerable | 2026-06-08 05:04:50.358532 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting a (1) report, (2) group, or (3) class or possibly have other unspecified impact.
Published: 2014-03-14T16:00:00.000Z
Updated: 2024-08-06T16:59:41.266Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1989 |
vulnerable | 2026-06-08 05:00:52.197503 |
Details available
telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise (PE) 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users to overwrite arbitrary files via a symlink attack on the NET::Telnet connection log (/tmp/out.log).
Published: 2012-06-27T18:00:00.000Z
Updated: 2024-08-06T19:17:27.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1987 |
vulnerable | 2026-06-08 05:00:52.183433 |
Details available
Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to (1) cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block, as demonstrated using CVE-2012-1986 and /dev/random; or (2) cause a denial of service (filesystem consumption) via crafted REST requests that use "a marshaled form of a Puppet::FileBucket::File object" to write to arbitrary file locations.
Published: 2012-05-29T20:00:00.000Z
Updated: 2024-08-06T19:17:27.604Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1986 |
vulnerable | 2026-06-08 05:00:52.182133 |
Details available
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunction with a crafted REST request for a file in a filebucket.
Published: 2012-05-29T20:00:00.000Z
Updated: 2024-08-06T19:17:27.701Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1906 |
vulnerable | 2026-06-08 05:00:51.319691 |
Details available
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp.
Published: 2012-05-29T20:00:00.000Z
Updated: 2024-08-06T19:17:27.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1054 |
vulnerable | 2026-06-08 05:00:47.267498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1053 |
vulnerable | 2026-06-08 05:00:47.264031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.