Puppet vulnerabilities
We track 3 vulnerabilities in Puppet products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2022.
Latest Puppet vulnerabilities
- 8.8 High severity
puppetlabs-mysql: Improper Neutralization of Special Elements used in an OS Command
Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet
- 9.8 Critical severity
puppetlabs-apt: Improper Neutralization of Special Elements used in an OS Command
Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet an
- 9.8 Critical severity
In certain situations it is possible for an unmanaged rule to exist on the target system that…
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state