# cve.now: Puppet

The newest entries naming Puppet as an affected vendor (up to 200), of 37 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-9160](https://cve.now/CVE-2024-9160.md): Security Misconfiguration in Forge module PEADM (CVSS 5.4)
- [CVE-2023-5309](https://cve.now/CVE-2023-5309.md): Broken Session Management in Puppet Enterprise (CVSS 6.8)
- [CVE-2023-5214](https://cve.now/CVE-2023-5214.md): CVE-2023-5214 - Privilege Escalation in Puppet Bolt (CVSS 6.5)
- [CVE-2023-5255](https://cve.now/CVE-2023-5255.md): Denial of Service for Revocation of Auto Renewed Certificates (CVSS 4.4)
- [CVE-2023-2530](https://cve.now/CVE-2023-2530.md): A privilege escalation allowing remote code execution was discovered in the orchestration service. (no CVSS)
- [CVE-2023-1894](https://cve.now/CVE-2023-1894.md): A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. (CVSS 5.3)
- [CVE-2022-3276](https://cve.now/CVE-2022-3276.md): Puppetlabs-mysql Command Injection (CVSS 8.4)
- [CVE-2022-3275](https://cve.now/CVE-2022-3275.md): Puppetlabs-apt Command Injection (CVSS 8.4)
- [CVE-2022-2394](https://cve.now/CVE-2022-2394.md): Sensitive Parameter Exposure in Puppet Bolt prior to 3.24 (CVSS 4.1)
- [CVE-2022-0675](https://cve.now/CVE-2022-0675.md): Puppet Firewall Module May Leave Unmanaged Rules (CVSS 5.6)
- [CVE-2020-7942](https://cve.now/CVE-2020-7942.md): Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom (no CVSS)
- [CVE-2018-11747](https://cve.now/CVE-2018-11747.md): Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. (no CVSS)
- [CVE-2018-6517](https://cve.now/CVE-2018-6517.md): Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's kno (no CVSS)
- [CVE-2018-11749](https://cve.now/CVE-2018-11749.md): When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server. (no CVSS)
- [CVE-2018-11746](https://cve.now/CVE-2018-11746.md): Puppet Discovery can leak authentication information (CVSS 8.6)
- [CVE-2018-6516](https://cve.now/CVE-2018-6516.md): On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x pr (no CVSS)
- [CVE-2018-6515](https://cve.now/CVE-2018-6515.md): Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a speci (no CVSS)
- [CVE-2018-6514](https://cve.now/CVE-2018-6514.md): In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerab (no CVSS)
- [CVE-2018-6513](https://cve.now/CVE-2018-6513.md): Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, P (no CVSS)
- [CVE-2018-6512](https://cve.now/CVE-2018-6512.md): The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. (no CVSS)
- [CVE-2018-6511](https://cve.now/CVE-2018-6511.md): XSS Vulnerability in Puppet Enterprise Console (CVSS 5.4)
- [CVE-2018-6510](https://cve.now/CVE-2018-6510.md): XSS Vulnerability in Puppet Enterprise Console (CVSS 5.4)
- [CVE-2018-6508](https://cve.now/CVE-2018-6508.md): Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the fa (no CVSS)
- [CVE-2017-10690](https://cve.now/CVE-2017-10690.md): In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retri (no CVSS)
- [CVE-2017-10689](https://cve.now/CVE-2017-10689.md): In previous versions of Puppet Agent it was possible to install a module with world writable permissions. (no CVSS)
- [CVE-2017-2297](https://cve.now/CVE-2017-2297.md): Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. (no CVSS)
- [CVE-2017-2296](https://cve.now/CVE-2017-2296.md): In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group na (no CVSS)
- [CVE-2017-2293](https://cve.now/CVE-2017-2293.md): Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to ins (no CVSS)
- [CVE-2016-5713](https://cve.now/CVE-2016-5713.md): Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables th (no CVSS)
- [CVE-2017-2299](https://cve.now/CVE-2017-2299.md): Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. (no CVSS)
- [CVE-2016-5716](https://cve.now/CVE-2016-5716.md): The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code ex (no CVSS)
- [CVE-2017-2295](https://cve.now/CVE-2017-2295.md): Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified (no CVSS)
- [CVE-2017-2294](https://cve.now/CVE-2017-2294.md): Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 failed to mark MCollective server private keys as sensitive (a feature added in (no CVSS)
- [CVE-2017-2298](https://cve.now/CVE-2017-2298.md): The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. (no CVSS)
- [CVE-2017-2292](https://cve.now/CVE-2017-2292.md): Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe\_load, allowing the potential for arbitrary code e (no CVSS)
- [CVE-2017-2290](https://cve.now/CVE-2017-2290.md): On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will (no CVSS)
- [CVE-2016-9686](https://cve.now/CVE-2016-9686.md): The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/puppet
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.