Puppet Enterprise 2.5.1
Approved changes feed: RSS · Atom
cpe:2.3:a:puppet:puppet_enterprise:2.5.1:*:*:*:*:*:*:*
part: a version: 2.5.1 update: *
| Vendor | Puppet (056a1ba3-12b3-5ecf-a97f-ab3b403c7816) |
|---|---|
| Product | Puppet Enterprise (f0f1d1ad-3d9e-59c3-8dee-09d0423ff49c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/puppetlabs/puppet |
purl2cpe | 2026-06-01 10:14:37.348073 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4967 |
vulnerable | 2026-06-08 05:04:50.364079 |
Details available
Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes.
Published: 2013-08-20T22:00:00.000Z
Updated: 2024-09-17T00:11:37.416Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4964 |
vulnerable | 2026-06-08 05:04:50.360059 |
Details available
Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Published: 2013-08-20T22:00:00.000Z
Updated: 2024-09-17T01:50:33.558Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4963 |
vulnerable | 2026-06-08 05:04:50.359569 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting a (1) report, (2) group, or (3) class or possibly have other unspecified impact.
Published: 2014-03-14T16:00:00.000Z
Updated: 2024-08-06T16:59:41.266Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4962 |
vulnerable | 2026-06-08 05:04:50.350786 |
Details available
The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors.
Published: 2013-08-20T22:00:00.000Z
Updated: 2024-09-17T01:11:25.432Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4961 |
vulnerable | 2026-06-08 05:04:50.350409 |
Details available
Puppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger products in its HTTP response headers, which allows remote attackers to obtain sensitive information.
Published: 2013-08-20T22:00:00.000Z
Updated: 2024-09-16T17:24:19.504Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4959 |
vulnerable | 2026-06-08 05:04:50.350017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4958 |
vulnerable | 2026-06-08 05:04:50.349621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4957 |
vulnerable | 2026-06-08 05:04:50.349203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4955 |
vulnerable | 2026-06-08 05:04:50.338261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4762 |
vulnerable | 2026-06-08 05:04:49.593475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3567 |
vulnerable | 2026-06-08 05:04:32.057029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2716 |
vulnerable | 2026-06-08 05:04:27.464666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1399 |
vulnerable | 2026-06-08 05:03:53.753165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1398 |
vulnerable | 2026-06-08 05:03:53.750715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5158 |
vulnerable | 2026-06-08 05:02:54.858903 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.