Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-1029
HistoryJan 16, 2015 - 12:00 a.m.

CVE-2015-1029

2015-01-1600:00:00
ubuntu.com
ubuntu.com
11

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.002

Percentile

54.9%

The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before
4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to
gain privileges or obtain sensitive information by prepopulating the fact
cache.

Bugs

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.002

Percentile

54.9%