CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-6501

Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.3%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 5.8

References

Products affected by CVE-2015-6501

Puppet » Puppet Enterprise » Version: N/A

cpe:2.3:a:puppet:puppet_enterprise:-
Puppet » Puppet Enterprise » Version: 1.0

cpe:2.3:a:puppet:puppet_enterprise:1.0
Puppet » Puppet Enterprise » Version: 1.1

cpe:2.3:a:puppet:puppet_enterprise:1.1
Puppet » Puppet Enterprise » Version: 1.2.0

cpe:2.3:a:puppet:puppet_enterprise:1.2.0
Puppet » Puppet Enterprise » Version: 1.2.1

cpe:2.3:a:puppet:puppet_enterprise:1.2.1
Puppet » Puppet Enterprise » Version: 1.2.2

cpe:2.3:a:puppet:puppet_enterprise:1.2.2
Puppet » Puppet Enterprise » Version: 1.2.3

cpe:2.3:a:puppet:puppet_enterprise:1.2.3
Puppet » Puppet Enterprise » Version: 1.2.4

cpe:2.3:a:puppet:puppet_enterprise:1.2.4
Puppet » Puppet Enterprise » Version: 1.2.5

cpe:2.3:a:puppet:puppet_enterprise:1.2.5
Puppet » Puppet Enterprise » Version: 1.2.6

cpe:2.3:a:puppet:puppet_enterprise:1.2.6
Puppet » Puppet Enterprise » Version: 1.2.7

cpe:2.3:a:puppet:puppet_enterprise:1.2.7
Puppet » Puppet Enterprise » Version: 2.0.0

cpe:2.3:a:puppet:puppet_enterprise:2.0.0
Puppet » Puppet Enterprise » Version: 2.0.1

cpe:2.3:a:puppet:puppet_enterprise:2.0.1
Puppet » Puppet Enterprise » Version: 2.0.2

cpe:2.3:a:puppet:puppet_enterprise:2.0.2
Puppet » Puppet Enterprise » Version: 2.0.3

cpe:2.3:a:puppet:puppet_enterprise:2.0.3
Puppet » Puppet Enterprise » Version: 2.5.0

cpe:2.3:a:puppet:puppet_enterprise:2.5.0
Puppet » Puppet Enterprise » Version: 2.5.1

cpe:2.3:a:puppet:puppet_enterprise:2.5.1
Puppet » Puppet Enterprise » Version: 2.5.2

cpe:2.3:a:puppet:puppet_enterprise:2.5.2
Puppet » Puppet Enterprise » Version: 2.5.3

cpe:2.3:a:puppet:puppet_enterprise:2.5.3
Puppet » Puppet Enterprise » Version: 2.6.0

cpe:2.3:a:puppet:puppet_enterprise:2.6.0
Puppet » Puppet Enterprise » Version: 2.6.1

cpe:2.3:a:puppet:puppet_enterprise:2.6.1
Puppet » Puppet Enterprise » Version: 2.7.0

cpe:2.3:a:puppet:puppet_enterprise:2.7.0
Puppet » Puppet Enterprise » Version: 2.7.1

cpe:2.3:a:puppet:puppet_enterprise:2.7.1
Puppet » Puppet Enterprise » Version: 2.7.2

cpe:2.3:a:puppet:puppet_enterprise:2.7.2
Puppet » Puppet Enterprise » Version: 2.8.0

cpe:2.3:a:puppet:puppet_enterprise:2.8.0
Puppet » Puppet Enterprise » Version: 2.8.1

cpe:2.3:a:puppet:puppet_enterprise:2.8.1
Puppet » Puppet Enterprise » Version: 2.8.2

cpe:2.3:a:puppet:puppet_enterprise:2.8.2
Puppet » Puppet Enterprise » Version: 2.8.3

cpe:2.3:a:puppet:puppet_enterprise:2.8.3
Puppet » Puppet Enterprise » Version: 2.8.4

cpe:2.3:a:puppet:puppet_enterprise:2.8.4
Puppet » Puppet Enterprise » Version: 2.8.5

cpe:2.3:a:puppet:puppet_enterprise:2.8.5
Puppet » Puppet Enterprise » Version: 2.8.6

cpe:2.3:a:puppet:puppet_enterprise:2.8.6
Puppet » Puppet Enterprise » Version: 2.8.7

cpe:2.3:a:puppet:puppet_enterprise:2.8.7
Puppet » Puppet Enterprise » Version: 2.8.8

cpe:2.3:a:puppet:puppet_enterprise:2.8.8
Puppet » Puppet Enterprise » Version: 2015.2.0

cpe:2.3:a:puppet:puppet_enterprise:2015.2.0
Puppet » Puppet Enterprise » Version: 3.0.0

cpe:2.3:a:puppet:puppet_enterprise:3.0.0
Puppet » Puppet Enterprise » Version: 3.0.1

cpe:2.3:a:puppet:puppet_enterprise:3.0.1
Puppet » Puppet Enterprise » Version: 3.1.0

cpe:2.3:a:puppet:puppet_enterprise:3.1.0
Puppet » Puppet Enterprise » Version: 3.1.1

cpe:2.3:a:puppet:puppet_enterprise:3.1.1
Puppet » Puppet Enterprise » Version: 3.1.2

cpe:2.3:a:puppet:puppet_enterprise:3.1.2
Puppet » Puppet Enterprise » Version: 3.1.3

cpe:2.3:a:puppet:puppet_enterprise:3.1.3
Puppet » Puppet Enterprise » Version: 3.2.0

cpe:2.3:a:puppet:puppet_enterprise:3.2.0
Puppet » Puppet Enterprise » Version: 3.2.1

cpe:2.3:a:puppet:puppet_enterprise:3.2.1
Puppet » Puppet Enterprise » Version: 3.2.2

cpe:2.3:a:puppet:puppet_enterprise:3.2.2
Puppet » Puppet Enterprise » Version: 3.2.3

cpe:2.3:a:puppet:puppet_enterprise:3.2.3
Puppet » Puppet Enterprise » Version: 3.3.0

cpe:2.3:a:puppet:puppet_enterprise:3.3.0
Puppet » Puppet Enterprise » Version: 3.3.1

cpe:2.3:a:puppet:puppet_enterprise:3.3.1
Puppet » Puppet Enterprise » Version: 3.3.2

cpe:2.3:a:puppet:puppet_enterprise:3.3.2
Puppet » Puppet Enterprise » Version: 3.7.0

cpe:2.3:a:puppet:puppet_enterprise:3.7.0
Puppet » Puppet Enterprise » Version: 3.7.1

cpe:2.3:a:puppet:puppet_enterprise:3.7.1
Puppet » Puppet Enterprise » Version: 3.7.2

cpe:2.3:a:puppet:puppet_enterprise:3.7.2
Puppet » Puppet Enterprise » Version: 3.8.0

cpe:2.3:a:puppet:puppet_enterprise:3.8.0
Puppet » Puppet Enterprise » Version: 3.8.1

cpe:2.3:a:puppet:puppet_enterprise:3.8.1
Puppet » Puppet Enterprise » Version: 3.8.2

cpe:2.3:a:puppet:puppet_enterprise:3.8.2
Puppet » Puppet Enterprise » Version: 3.8.3

cpe:2.3:a:puppet:puppet_enterprise:3.8.3
Puppet » Puppet Enterprise » Version: 3.8.4

cpe:2.3:a:puppet:puppet_enterprise:3.8.4
Puppet » Puppet Enterprise » Version: 3.8.5

cpe:2.3:a:puppet:puppet_enterprise:3.8.5
Puppet » Puppet Enterprise » Version: 3.8.6

cpe:2.3:a:puppet:puppet_enterprise:3.8.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-6501

Products

Pricing

Contact Us