CVE-2015-1029 The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or obtain sensitive information by p...
MediumCVSS 6.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or obtain sensitive information by prepopulating the fact cache.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/puppet-module-puppetlabs-stdlib(Debian:12) | < 4.9.0-1 | 4.9.0-1 |
| debian/puppet-module-puppetlabs-stdlib(Debian:13) | < 4.9.0-1 | 4.9.0-1 |
| debian/puppet-module-puppetlabs-stdlib(Debian:14) | < 4.9.0-1 | 4.9.0-1 |
| puppet stdlib | = 2.1.0 | No fix listed |
| puppet stdlib | = 2.1.1 | No fix listed |
| puppet stdlib | = 2.1.2 | No fix listed |
| puppet stdlib | = 2.1.3 | No fix listed |
| puppet stdlib | = 2.2.0 | No fix listed |
| puppet stdlib | = 2.2.1 | No fix listed |
| puppet stdlib | = 2.3.0 | No fix listed |
| puppet stdlib | = 2.3.1 | No fix listed |
| puppet stdlib | = 2.3.2 | No fix listed |
| puppet stdlib | = 2.3.3 | No fix listed |
| puppet stdlib | = 2.4.0 | No fix listed |
| puppet stdlib | = 2.5.0 | No fix listed |
| puppet stdlib | = 3.0.0 | No fix listed |
| puppet stdlib | = 4.1.0 | No fix listed |
| puppet stdlib | = 4.2.0 | No fix listed |
| puppet stdlib | = 4.2.1 | No fix listed |
| puppet stdlib | = 4.2.2 | No fix listed |
| puppet stdlib | = 4.3.0 | No fix listed |
| puppet stdlib | = 4.3.1 | No fix listed |
| puppet stdlib | = 4.3.2 | No fix listed |
| puppet stdlib | = 4.4.0 | No fix listed |
| puppet stdlib | = 4.5.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-1029 vendor-advisory
- puppetlabs.com vendor-advisory
- 62328 third-party-advisory
- bugs.debian.org issue-tracking