Puppet: >> Puppet Enterprise >> 3.8.3 Security Vulnerabilities
MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.
CVSS Score
9.8
EPSS Score
0.021
Published
2017-02-13
Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-01-12
Page 3