puppet hiera vulnerabilities

Latest puppet hiera CVEs

Newest publication first

1. CVE-2014-3248 facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability

   Published 2014-11-16

   Medium·CVSS 6.2 EPSS 0.54% PoC

   Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privilege...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.