CVE-2015-1029

Published: Jan 16, 2015Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or obtain sensitive information by prepopulating the fact cache.

Affected (22)

Products: Puppet: Stdlib

Puppet

1 product

Stdlib

Configuration A

22 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Puppet Stdlib	Version 2.1.0
Puppet Stdlib	Version 2.1.1
Puppet Stdlib	Version 2.1.2
Puppet Stdlib	Version 2.1.3
Puppet Stdlib	Version 2.2.0
Puppet Stdlib	Version 2.2.1
Puppet Stdlib	Version 2.3.0
Puppet Stdlib	Version 2.3.1
Puppet Stdlib	Version 2.3.2
Puppet Stdlib	Version 2.3.3
Puppet Stdlib	Version 2.4.0
Puppet Stdlib	Version 2.5.0
Puppet Stdlib	Version 3.0.0
Puppet Stdlib	Version 4.1.0
Puppet Stdlib	Version 4.2.0
Puppet Stdlib	Version 4.2.1
Puppet Stdlib	Version 4.2.2
Puppet Stdlib	Version 4.3.0
Puppet Stdlib	Version 4.3.1
Puppet Stdlib	Version 4.3.2
Puppet Stdlib	Version 4.4.0
Puppet Stdlib	Version 4.5.0

Running on/with	Platform Versions
Puppet Puppet Enterprise	Up to 2.8.8

Related CWEs

CWE-264

References (4)

http://puppetlabs.com/security/cve/cve-2015-1029

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/62328

Source: cve@mitre.org

http://puppetlabs.com/security/cve/cve-2015-1029

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/62328

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.