CVE catalog

CVE-2019-9929

cfengine3: CVE-2019-9929

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
1.98% · Oct 25, 2026

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancfengine3sid3.27.3-1not affected
Debiancfengine3forky3.27.1-2not affected
Debiancfengine3trixie3.24.1-2not affected
Debiancfengine3bookworm3.21.0-2not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancfengine3sourcesidNot affectedunimportantNot reportedNot reported
Debiancfengine3sourceforkyNot affectedunimportantNot reportedNot reported
Debiancfengine3sourcetrixieNot affectedunimportantNot reportedNot reported
Debiancfengine3sourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [cfengine3]Not affected
    Details (2)
    • 3.21.0-2 · amd64 · bookworm

      Not affected

      dsa · cfengine3 · debian · bookworm

    • 3.21.0-2 · arm64 · bookworm

      Not affected

      dsa · cfengine3 · debian · bookworm

  • [libpromises3]Not affected

    Source package: [cfengine3]

    Details (2)
    • 3.21.0-2 · amd64 · bookworm

      Not affected

      dsa · cfengine3 · debian · bookworm

    • 3.21.0-2 · arm64 · bookworm

      Not affected

      dsa · cfengine3 · debian · bookworm

Observed:

References